CVE-2024-6237

概要

参考情報

• access.redhat.com/errata/RHSA-2024:4997
• access.redhat.com/errata/RHSA-2024:5192
• access.redhat.com/security/cve/CVE-2024-6237 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• 389ds/389-ds-base · Issue Tracking

directory server のその他の脆弱性

• CVE-2026-18651中 5.4A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before per…
• CVE-2026-15722高 7.5A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copie…
• CVE-2026-11770高 7.5A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication…
• CVE-2026-15041低 3.7A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for comparing password has…
• CVE-2026-14969中 4.4A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3D…