Heap Overflow Flaw Leads to Denial of Service in 389-ds-base
CVE-2024-1062

5.5MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Directory Server 11.5 E4s For Rhel 8; Red Hat Directory Server 11.7 For Rhel 8; Red Hat Directory Server 11.8 For Rhel 8
Vendor: CVE Published:; 12 February 2024

What is CVE-2024-1062?

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet