NetSight
medium5.5

CVE-2024-1062

A heap overflow flaw was found in 389-ds-base.

Impact

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

Affected products

VendorProductAffected versions
Redhat389 Directory Server
before 2.2.0
RedhatDirectory Server
All versions
Versions 11.7, 11.8, 12.0
FedoraprojectFedora
Versions 39, 40, 41
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.6, 8.8, 9.2
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.6, 8.8, 9.2
RedhatEnterprise Linux For Ibm Z Systems
Version 9.2
RedhatEnterprise Linux For Ibm Z Systems Eus
Version 8.8
RedhatEnterprise Linux For Power Little Endian Eus
Versions 8.8, 9.2
RedhatEnterprise Linux Server Aus
Versions 8.6, 9.2
RedhatEnterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Versions 8.6, 8.8, 9.2
RedhatEnterprise Linux Server Tus
Versions 8.6, 8.8

Weakness classification

References