RHSA-2024:4092 - Security Advisory

Topic

An update for the redhat-ds:12 module is now available for Red Hat Directory Server 12.4 for RHEL 9.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

Description

Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages for server administration.

Security Fix(es):

• 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657) (2267976)
• 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199) (2274401)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• One level scoped search now returns a subsuffix correctly (BZ#2292903)
• Improved performance of filter component evaluation when tested against a large value set, such as group members (BZ#2293001)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Directory Server 12 x86_64
• Red Hat Directory Server - Extended Update Support 12 for RHEL 9.4 x86_64

Fixes

• BZ - 2267976 - CVE-2024-2199 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
• BZ - 2274401 - CVE-2024-3657 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
• BZ - 2292903 - subsuffix are not returned in one level scoped search
• BZ - 2293001 - Improve the performance of evaluation of filter component when tested against a large valueset (like group members) [dirsrv-12.4.z]

CVEs

• CVE-2024-2199
• CVE-2024-3657

References

• https://access.redhat.com/security/updates/classification/#important