Most recent entries from all

ALSA-2024:3047 — Moderate: 389-ds:1.4 security update

Affected: AlmaLinux:8: 389-ds-base, AlmaLinux:8: 389-ds-base-devel, AlmaLinux:8: 389-ds-base-legacy-tools, AlmaLinux:8: 389-ds-base-libs, AlmaLinux:8: 389-ds-base-snmp, AlmaLinux:8: python3-lib389

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

* 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr) (CVE-2024-1062)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-01420

EUVD-2026-270711

fkie_cve-2024-1062

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

GHSA-6v6c-gc45-x65c

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

gsd-2024-1062

OESA-2024-1148 — three-eight-nine-ds-base security update

Affected: openEuler:20.03-LTS-SP1: three-eight-nine-ds-base, openEuler:20.03-LTS-SP4: three-eight-nine-ds-base, openEuler:22.03-LTS: three-eight-nine-ds-base, openEuler:22.03-LTS-SP1: three-eight-nine-ds-base, openEuler:22.03-LTS-SP2: three-eight-nine-ds-base, openEuler:22.03-LTS-SP3: three-eight-nine-ds-base

389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fix(es): A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.(CVE-2024-1062)

RHSA-2024:1074 — Red Hat Security Advisory: 389-ds:1.4 security update

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

RHSA-2024:3047 — Red Hat Security Advisory: 389-ds:1.4 security update

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

UBUNTU-CVE-2024-1062

Affected: Ubuntu:Pro:16.04:LTS: 389-ds-base, Ubuntu:Pro:18.04:LTS: 389-ds-base, Ubuntu:Pro:20.04:LTS: 389-ds-base, Ubuntu:22.04:LTS: 389-ds-base, Ubuntu:24.04:LTS: 389-ds-base, Ubuntu:25.10: 389-ds-base, Ubuntu:26.04:LTS: 389-ds-base

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

WID-SEC-W-2024-0547 — Red Hat Enterprise Linux und Directory Server: Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Red Hat Directory Server ausnutzen, um einen Denial of Service Angriff durchzuführen.