Orta CVSS 5.5
CVE-2024-1062: 389 Directory Server: yığın (heap) taşması
Açıklama (NVD)
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
Özet bilgiler
- Ürün
- Redhat 389 Directory Server
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,31 (yüzdelik 24)
- CWE
- CWE-122
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-389-directory-server | — | — | 2.2.0 |
| redhat-directory-server | — | — | — |
| redhat-directory-server | 11.7 | 11.7 | — |
| redhat-directory-server | 11.8 | 11.8 | — |
| fedoraproject-fedora | 39 | 39 | — |
| fedoraproject-fedora | 40 | 40 | — |
| fedoraproject-fedora | 41 | 41 | — |
| redhat-directory-server | 12.0 | 12.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-arm-64-eus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-for-arm-64-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-for-arm-64-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 9.2 | 9.2 | — |
| redhat-enterprise-linux-for-ibm-z-systems-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-for-power-little-endian-eus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-aus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-aus | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 8.8 | 8.8 | — |
| redhat-enterprise-linux-server-for-power-little-endian-update-services-for-sap-solutions | 9.2 | 9.2 | — |
| redhat-enterprise-linux-server-tus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-server-tus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.6 | 8.6 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.8 | 8.8 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- bugzilla.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- bugzilla.redhat.com
- CWE-122