LDAP Query Flaw Leads to Denial of Service on 389-ds-base Directory Server
CVE-2024-3657

7.5HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Directory Server 11.7 For Rhel 8; Red Hat Directory Server 11.8 For Rhel 8; Red Hat Directory Server 11.9 For Rhel 8; Red Hat Directory Server 12.2 Eus For Rhel 9
Vendor: CVE Published:; 28 May 2024

Summary

A vulnerability exists in the 389-ds-base software, where an attacker can exploit a specially-crafted Lightweight Directory Access Protocol (LDAP) query. This exploitation can lead to a failure of the directory server, resulting in a denial of service (DoS). The flaw presents a significant risk for users relying on the directory service for critical operations and could disrupt network communications. It is crucial for organizations using this product to monitor their systems and apply necessary patches to mitigate the risk.