CVE-2024-5953

medium

Description

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

References

Advisories
More

https://access.redhat.com/errata/RHSA-2025:1632

https://access.redhat.com/errata/RHSA-2024:7458

https://access.redhat.com/errata/RHSA-2024:6576

https://access.redhat.com/errata/RHSA-2024:6569

https://access.redhat.com/errata/RHSA-2024:6568

https://access.redhat.com/errata/RHSA-2024:6153

https://access.redhat.com/errata/RHSA-2024:5690

https://access.redhat.com/errata/RHSA-2024:5192

https://access.redhat.com/errata/RHSA-2024:4997

https://access.redhat.com/errata/RHSA-2024:4633

https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47135

https://bugzilla.redhat.com/show_bug.cgi?id=2292104

https://access.redhat.com/security/cve/CVE-2024-5953

Details

Source: Mitre, NVD

Published: 2024-06-18

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.7

Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H