CVE-2024-6237 : A flaw was found in the 389 Directory Server. This flaw allows an unauthenticate

A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

Published 2024-07-09 17:15:49

Updated 2024-08-29 18:15:15

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2024-6237

Redhat » Enterprise Linux » Version: 9.0
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Matching versions
Redhat » Directory Server » Version: 12.0
cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*
Matching versions
Redhat » 389 Directory Server » Version: N/A
cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*
Matching versions
Redhat » 389 Directory Server » Version:
cpe:2.3:o:redhat:389_directory_server:0:*:*:*:*:*:*:*
Matching versions

*Version "0" is used as a placeholder when we don't have exact version information.

Exploit prediction scoring system (EPSS) score for CVE-2024-6237

EPSS FAQ

1.32%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-6237

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST	2024-07-12
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	Red Hat, Inc.	2024-08-29
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	3.9	1.4	Red Hat, Inc.	2024-07-09
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	N/A	N/A	RedHat-CVE-2024-6237	2024-07-09
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: Low

CWE ids for CVE-2024-6237

CWE-230 Improper Handling of Missing Values

The product does not handle or incorrectly handles when a parameter, field, or argument name is specified, but the associated value is missing, i.e. it is empty, blank, or null.

Assigned by: secalert@redhat.com (Secondary)

References for CVE-2024-6237

https://access.redhat.com/errata/RHSA-2024:4997

RHSA-2024:4997 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2024:5192

RHSA-2024:5192 - Security Advisory - Red Hat 客户门户网站

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=2293579

2293579 – (CVE-2024-6237) CVE-2024-6237 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request
Issue Tracking
https://github.com/389ds/389-ds-base/issues/5989

RFE support of inChain Matching Rule · Issue #5989 · 389ds/389-ds-base · GitHub
Issue Tracking
https://access.redhat.com/security/cve/CVE-2024-6237

CVE-2024-6237- Red Hat Customer Portal
Vendor Advisory

Jump to

Vulnerability Details : CVE-2024-6237

Products affected by CVE-2024-6237

Exploit prediction scoring system (EPSS) score for CVE-2024-6237

CVSS scores for CVE-2024-6237

CWE ids for CVE-2024-6237

References for CVE-2024-6237