389-ds-base: potential denial of service via specially crafted kerberos as-req request (Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8)

CVE-2024-3657
HIGH 7.5

At a glance

Source
NVD
EPSS
EPSS 1.28 % · percentile 70 ()
State
PUBLISHED
Published
Updated
Assigner
redhat
NVD status
Deferred

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · secalert@redhat.com (Secondary)

European references

Affected products

ProductVersions
Red Hat · Red Hat Directory Server 11.5 E4S for RHEL 8unaffected 8060020250210084424.0ca98e7e < *
Red Hat · Red Hat Directory Server 11.7 for RHEL 8unaffected 8080020240909040333.f969626e < *
Red Hat · Red Hat Directory Server 11.8 for RHEL 8unaffected 8090020240606122459.91529cd0 < *
Red Hat · Red Hat Directory Server 11.9 for RHEL 8unaffected 8100020240604161237.37ed7c03 < *
Red Hat · Red Hat Directory Server 12.2 EUS for RHEL 9unaffected 9020020240916150035.1674d574 < *
Red Hat · Red Hat Directory Server 12.4 for RHEL 9unaffected 9040020240604143706.1674d574 < *
Red Hat · Red Hat Enterprise Linux 7unaffected 0:1.3.11.1-5.el7_9 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 8100020240613122040.25e700aa < *
Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 8080020240807050952.6dbb3803 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:2.4.5-8.el9_4 < *
Red Hat · Red Hat Enterprise Linux 9.2 Extended Update Supportunaffected 0:2.2.4-9.el9_2 < *
Red Hat · Red Hat Enterprise Linux 10
Red Hat · Red Hat Enterprise Linux 6

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD