CVE-2024-5953

MediumCVSS 5.7/10Last modified Nov 7, 2026

Description

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1288

Affected software

VendorProductVersions
———
Red HatRed Hat Directory Server 11.5 E4S for RHEL 8—
Red HatRed Hat Directory Server 11.7 for RHEL 8—
Red HatRed Hat Directory Server 11.9 for RHEL 8—
Red HatRed Hat Directory Server 12.2 EUS for RHEL 9—
Red HatRed Hat Directory Server 12.4 for RHEL 9—
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 6—

References

Timeline

Published
Jun 18, 2024
Last modified
Nov 7, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-59555.4Cross-site scripting vulnerability in Trellix ePolicy Orchestrator prior to ePO 5.10 Service Pack 1 Update 3 allows a remote authenticated aCVE-2024-59565.3This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix ICVE-2024-59577.5This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.CVE-2024-59588.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command LinCVE-2024-59595.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows StorCVE-2024-59609.8Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials. This issue affects Panel: beCVE-2024-59615.3Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSCVE-2024-59626.1A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoint of multiple WSO2 products due to missing output eCVE-2024-59636.7Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue affects Hitachi DevCVE-2024-59646.4The Zenon Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode CVE-2024-59655.4The Mosaic theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in CVE-2024-59665.4The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button
CVE-2024-5953: Medium severity, CVSS 5.7 | Vulnix