Medium severity6.5NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026
CVE-2024-6237
CVE-2024-6237
Description
A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:directory_server:12.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:389_directory_server:-:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords5 versionspkg:rpm/almalinux/389-ds-basepkg:rpm/almalinux/389-ds-base-develpkg:rpm/almalinux/389-ds-base-libspkg:rpm/almalinux/python3-lib389pkg:rpm/opensuse/389-ds&distro=openSUSE%20Tumbleweed
< 2.4.5-9.el9_4+ 4 more
- (no CPE)range: < 2.4.5-9.el9_4
- (no CPE)range: < 2.4.5-9.el9_4
- (no CPE)range: < 2.4.5-9.el9_4
- (no CPE)range: < 2.4.5-9.el9_4
- (no CPE)range: < 3.1.1~git0.aef1668-1.1
Patches
Vulnerability mechanics
References
5- access.redhat.com/security/cve/CVE-2024-6237nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- github.com/389ds/389-ds-base/issues/5989nvdIssue Tracking
- access.redhat.com/errata/RHSA-2024:4997nvd
- access.redhat.com/errata/RHSA-2024:5192nvd
News mentions
0No linked articles in our index yet.