CVE-2024-2199
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
A denial of service vulnerability in 389-ds-base LDAP server. An authenticated user may cause a server crash while modifying the `userPassword` attribute using malformed input.
Risk Assessment
The risk involves the possibility of disrupting LDAP service by an authenticated user, potentially leading to unavailability of systems relying on this service.
Recommendation
Immediately update the 389-ds-base package to the latest patched version. As a temporary measure, restrict access to modifying the `userPassword` attribute for untrusted users.
Original NVD description (English source)
A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.