CVE-2024-6237: 389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request
A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
Other sources
Summary: An unauthenticated user can cause a systematic server crash while sending a specific extended search request.
Description: 389-ds-base in RHEL 9.4 - RHDS 12.4, supports a new matching rule (inchain or 1.2.840.113556.1.4.1941). This matching rule requires that the matching attribute has a DN syntax. If the attribute in the ldap client request is not DN syntax, the server logs a message. The format of the message requires an attribute but as the attribute is missing, it triggers a SEGV.
Steps to reproduce: See below
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6237?
CVE-2024-6237 has a high severity rating due to its potential to allow denial of service through a systematic server crash.
How do I fix CVE-2024-6237?
To mitigate CVE-2024-6237, update to the latest version of the affected software or apply the recommended patches from Red Hat.
Which versions of Red Hat are affected by CVE-2024-6237?
CVE-2024-6237 affects Red Hat Directory Server 12.0 and Red Hat Enterprise Linux 9.0.
Who can exploit CVE-2024-6237?
CVE-2024-6237 can be exploited by unauthenticated users sending specific extended search requests to the server.
What impact does CVE-2024-6237 have on systems?
The impact of CVE-2024-6237 is a denial of service that results in the systematic crash of the 389 Directory Server.