CVE-2024-5953
A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.7
- CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.58%
- CWE
- CWE-1288
- Published
- 2024-06-18
- Last modified
- 2026-03-13
Affected products
- Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8
- Red Hat Red Hat Directory Server 11.7 for RHEL 8
- Red Hat Red Hat Directory Server 11.9 for RHEL 8
- Red Hat Red Hat Directory Server 12.2 EUS for RHEL 9
- Red Hat Red Hat Directory Server 12.4 for RHEL 9
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
Weakness type
Related vulnerabilities
- CVE-2026-69793 — Windows TCP/IP Security Feature Bypass Vulnerability
- CVE-2026-18238 — OOBR in rpcap client in libpcap before 1.10.7
- CVE-2026-18794 — OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
- CVE-2026-73219 — CVAT: Denial of service with regards to automatic annotation
- CVE-2026-18209 — Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check
- CVE-2026-15943 — Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change
- CVE-2026-42982 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-14781 — Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email