Red Hat Red Hat Directory Server 12.4 for RHEL 9
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-6237 | fixed in 9040020240723122852.1674d574 | 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-5953 | | 389-ds-base: malformed userpassword hash may cause denial of service | MEDIUM 5.7 | 0.6 % | ||
| CVE-2024-3657 | | 389-ds-base: potential denial of service via specially crafted kerberos as-req request | HIGH 7.5 | 1.3 % | ||
| CVE-2024-2199 | fixed in 9040020240604143706.1674d574 | 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c | MEDIUM 5.7 | 0.6 % |