medium5.5
CVE-2024-1062
A heap overflow flaw was found in 389-ds-base.
Impact
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | 389 Directory Server | before 2.2.0 |
| Redhat | Directory Server | All versions Versions 11.7, 11.8, 12.0 |
| Fedoraproject | Fedora | Versions 39, 40, 41 |
| Redhat | Enterprise Linux | Version 8.0 |
| Redhat | Enterprise Linux Eus | Versions 8.6, 8.8, 9.2 |
| Redhat | Enterprise Linux For Arm 64 Eus | Versions 8.6, 8.8, 9.2 |
| Redhat | Enterprise Linux For Ibm Z Systems | Version 9.2 |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | Version 8.8 |
| Redhat | Enterprise Linux For Power Little Endian Eus | Versions 8.8, 9.2 |
| Redhat | Enterprise Linux Server Aus | Versions 8.6, 9.2 |
| Redhat | Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions | Versions 8.6, 8.8, 9.2 |
| Redhat | Enterprise Linux Server Tus | Versions 8.6, 8.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2024:1074
- https://access.redhat.com/errata/RHSA-2024:1372
- https://access.redhat.com/errata/RHSA-2024:3047
- https://access.redhat.com/errata/RHSA-2024:4209
- https://access.redhat.com/errata/RHSA-2024:4633
- https://access.redhat.com/errata/RHSA-2024:5690
- https://access.redhat.com/errata/RHSA-2024:7458
- https://access.redhat.com/errata/RHSA-2025:1632
- https://access.redhat.com/security/cve/CVE-2024-1062
- https://bugzilla.redhat.com/show_bug.cgi?id=2256711
- https://bugzilla.redhat.com/show_bug.cgi?id=2261879
- https://access.redhat.com/errata/RHSA-2024:1074
- https://access.redhat.com/errata/RHSA-2024:1372
- https://access.redhat.com/errata/RHSA-2024:3047
- https://access.redhat.com/errata/RHSA-2024:4209
- https://access.redhat.com/errata/RHSA-2024:4633
- https://access.redhat.com/security/cve/CVE-2024-1062
- https://bugzilla.redhat.com/show_bug.cgi?id=2256711
- https://bugzilla.redhat.com/show_bug.cgi?id=2261879