PT-2024-19142

CVE-2024-2199

·

Published

2024-03-05

·

Updated

2026-06-26

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions 389-ds-base (affected versions not specified)
Description A denial of service issue was found in the 389-ds-base ldap server, which may allow an authenticated user to cause a server crash while modifying the userPassword using malformed input.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2024-2199
BDU:2025-11957
ALSA-2024:3837
ALSA-2024:4235
ALT-PU-2024-11458
ALT-PU-2024-11462
ALT-PU-2024-11466
CESA-2024_4235
DLA-4021-1
INFSA-2024_3837
INFSA-2024_4235
OESA-2024-1724
OPENSUSE-SU-2024:14227-1
OPENSUSE-SU-2024_3082-1
OPENSUSE-SU-2024_3218-1
OPENSUSE-SU-2024_3257-1
OPENSUSE-SU-2024_3843-1
OPENSUSE-SU-2024_3844-1
RHSA-2024:3591
RHSA-2024_3591
RHSA-2024:3837
RHSA-2024_3837
RHSA-2024:4092
RHSA-2024:4209
RHSA-2024:4210
RHSA-2024:4235
RHSA-2024_4235
RHSA-2024:4633
RHSA-2024:5690
RHSA-2025:1632
RLSA-2024:3837
RLSA-2024:4235
SUSE-SU-2024:2910-1
SUSE-SU-2024_2910-1
SUSE-SU-2024:3082-1
SUSE-SU-2024_3082-1
SUSE-SU-2024:3218-1
SUSE-SU-2024:3257-1
SUSE-SU-2024_3257-1
SUSE-SU-2024:3843-1
SUSE-SU-2024_3843-1
SUSE-SU-2024:3844-1
SUSE-SU-2024_3844-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com