Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-3657

Fixed in a distro release EPSS 1%CVSS 7.5

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service

Published 2024-05-28 · CVE record · OSV

Products: Red Hat Directory Server 11.5 E4S for RHEL 8, Red Hat Directory Server 11.7 for RHEL 8, Red Hat Directory Server 11.8 for RHEL 8, Red Hat Directory Server 11.9 for RHEL 8, Red Hat Directory Server 12.2 EUS for RHEL 9, Red Hat Directory Server 12.4 for RHEL 9, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 8389-ds-base1.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 8389-ds-base-devel1.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 8389-ds-base-legacy-tools1.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 8389-ds-base-libs1.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 8389-ds-base-snmp1.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 8python3-lib3891.4.3.39-7.module_el8.10.0+3864+d8eec553
AlmaLinux 9389-ds-base2.4.5-8.el9_4
AlmaLinux 9389-ds-base-devel2.4.5-8.el9_4
AlmaLinux 9389-ds-base-libs2.4.5-8.el9_4
AlmaLinux 9python3-lib3892.4.5-8.el9_4
Amazon Linux 2389-ds-base1.3.10.2-17.amzn2.0.2
Amazon Linux 2389-ds-base-devel1.3.10.2-17.amzn2.0.2
Amazon Linux 2389-ds-base-libs1.3.10.2-17.amzn2.0.2
Amazon Linux 2389-ds-base-snmp1.3.10.2-17.amzn2.0.2
Debian 11389-ds-base1.4.4.11-2+deb11u1
Debian 12389-ds-base2.3.1+dfsg1-1+deb12u1
Debian 13389-ds-base3.1.1+dfsg1-1
Red Hat directory server 11.7389-ds-base0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-debuginfo0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-debugsource0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-devel0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-legacy-tools0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-legacy-tools-debuginfo0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-libs0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-libs-debuginfo0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-snmp0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7389-ds-base-snmp-debuginfo0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7cockpit-389-ds0:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.7python3-lib3890:1.4.3.34-4.module+el8dsrv+22274+a8abd89c
Red Hat directory server 11.8389-ds-base0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-debuginfo0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-debugsource0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-devel0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-legacy-tools0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-legacy-tools-debuginfo0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-libs0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-libs-debuginfo0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-snmp0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8389-ds-base-snmp-debuginfo0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8cockpit-389-ds0:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.8python3-lib3890:1.4.3.37-10.module+el8dsrv+21971+f7435891
Red Hat directory server 11.9389-ds-base0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-debuginfo0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-debugsource0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-devel0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-legacy-tools0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-legacy-tools-debuginfo0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-libs0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-libs-debuginfo0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-snmp0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9389-ds-base-snmp-debuginfo0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9cockpit-389-ds0:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 11.9python3-lib3890:1.4.3.39-4.module+el8dsrv+21965+9ff26197
Red Hat directory server 12.4389-ds-base0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-debuginfo0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-debugsource0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-devel0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-libs0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-libs-debuginfo0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-snmp0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4389-ds-base-snmp-debuginfo0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4cockpit-389-ds0:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server 12.4python3-lib3890:2.4.5-4.module+el9dsrv+21964+c7e95493
Red Hat directory server e4s 11.5389-ds-base0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-debuginfo0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-debugsource0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-devel0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-legacy-tools0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-legacy-tools-debuginfo0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-libs0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-libs-debuginfo0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-snmp0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5389-ds-base-snmp-debuginfo0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5cockpit-389-ds0:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server e4s 11.5python3-lib3890:1.4.3.34-4.module+el8dsrv+22781+5fe99dde
Red Hat directory server eus 12.2389-ds-base0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-debuginfo0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-debugsource0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-devel0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-libs0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-libs-debuginfo0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-snmp0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2389-ds-base-snmp-debuginfo0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2cockpit-389-ds0:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat directory server eus 12.2python3-lib3890:2.2.7-6.module+el9dsrv+22320+37c894f3
Red Hat Enterprise Linux 7389-ds-base0:1.3.11.1-5.el7_9
Red Hat Enterprise Linux 7389-ds-base-debuginfo0:1.3.11.1-5.el7_9
Red Hat Enterprise Linux 7389-ds-base-devel0:1.3.11.1-5.el7_9
Red Hat Enterprise Linux 7389-ds-base-libs0:1.3.11.1-5.el7_9
Red Hat Enterprise Linux 7389-ds-base-snmp0:1.3.11.1-5.el7_9
Red Hat Enterprise Linux 8389-ds-base0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-debuginfo0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-debugsource0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-devel0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-legacy-tools0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-legacy-tools-debuginfo0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-libs0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-libs-debuginfo0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-snmp0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8389-ds-base-snmp-debuginfo0:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 8python3-lib3890:1.4.3.39-7.module+el8.10.0+21985+3665ccdb
Red Hat Enterprise Linux 9389-ds-base0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-debuginfo0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-debugsource0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-devel0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-libs0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-libs-debuginfo0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9389-ds-base-snmp-debuginfo0:2.4.5-8.el9_4
Red Hat Enterprise Linux 9python3-lib3890:2.4.5-8.el9_4
Red Hat rhel eus 8.8389-ds-base0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-debuginfo0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-debugsource0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-devel0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-legacy-tools0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-legacy-tools-debuginfo0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-libs0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-libs-debuginfo0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-snmp0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8389-ds-base-snmp-debuginfo0:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 8.8python3-lib3890:1.4.3.35-5.module+el8.8.0+22193+5f98570a
Red Hat rhel eus 9.2389-ds-base0:2.2.4-9.el9_2
Red Hat rhel eus 9.2389-ds-base-debuginfo0:2.2.4-9.el9_2
Red Hat rhel eus 9.2389-ds-base-debugsource0:2.2.4-9.el9_2
Red Hat rhel eus 9.2389-ds-base-libs0:2.2.4-9.el9_2
Red Hat rhel eus 9.2389-ds-base-libs-debuginfo0:2.2.4-9.el9_2
Red Hat rhel eus 9.2389-ds-base-snmp-debuginfo0:2.2.4-9.el9_2
Red Hat rhel eus 9.2python3-lib3890:2.2.4-9.el9_2
Rocky Linux 8389-ds-base0:1.4.3.39-7.module+el8.10.0+1832+2f5a9255
Rocky Linux 9389-ds-base0:2.4.5-8.el9_4
SUSE Enterprise Storage 7.1389-ds1.4.4.20~git3.e7ac6d87-150300.3.35.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS389-ds1.4.4.20~git3.e7ac6d87-150300.3.35.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS389-ds2.0.20~git9.5e2d637c-150400.3.42.3
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS389-ds2.0.20~git9.5e2d637c-150400.3.42.3
SUSE Linux Enterprise Module for Server Applications 15 SP5389-ds2.2.10~git2.345056d3-150500.3.21.1
SUSE Linux Enterprise Module for Server Applications 15 SP5389-ds2.2.10~git18.20ce9289-150500.3.24.1
SUSE Linux Enterprise Module for Server Applications 15 SP6389-ds2.2.10~git2.345056d3-150600.8.7.2
SUSE Linux Enterprise Module for Server Applications 15 SP6389-ds2.2.10~git18.20ce9289-150600.8.10.1
SUSE Linux Enterprise Server 15 SP3-LTSS389-ds1.4.4.20~git3.e7ac6d87-150300.3.35.1
SUSE Linux Enterprise Server 15 SP4-LTSS389-ds2.0.20~git9.5e2d637c-150400.3.42.3
SUSE Linux Enterprise Server for SAP Applications 15 SP3389-ds1.4.4.20~git3.e7ac6d87-150300.3.35.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4389-ds2.0.20~git9.5e2d637c-150400.3.42.3
SUSE Manager Proxy 4.3389-ds2.0.20~git9.5e2d637c-150400.3.42.3
SUSE Manager Server 4.3389-ds2.0.20~git9.5e2d637c-150400.3.42.3
Ubuntu 22.04 LTS389-ds-baseno fix
Ubuntu 24.04 LTS389-ds-baseno fix
Ubuntu 25.10389-ds-baseno fix
Ubuntu 26.04 LTS389-ds-baseno fix
Ubuntu 26.10389-ds-baseno fix
Ubuntu Pro 16.04 LTS389-ds-baseno fix
Ubuntu Pro 18.04 LTS389-ds-baseno fix
Ubuntu Pro 20.04 LTS389-ds-baseno fix
openSUSE Leap 15.5389-ds2.2.10~git18.20ce9289-150500.3.24.1
openSUSE Leap 15.5389-ds2.2.10~git2.345056d3-150500.3.21.1
openSUSE Leap 15.6389-ds2.2.10~git2.345056d3-150600.8.7.2
openSUSE Leap 15.6389-ds2.2.10~git18.20ce9289-150600.8.10.1
openSUSE Tumbleweed389-ds3.1.1~git0.aef1668-1.1