CVE-2024-2199CWE-20

389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c

Medium · published May 28, 2024

CVSS v3.1
5.7
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00565 · 46.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-05-28T12:04Z
EPSS history
Timeline
  • 28 MAY 12:04Z
    389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c
    cvelistv5