CVE-2024-8445

Vulnerability

Analysis

CVE-2024-8445 reveals that the patch for CVE-2024-2199 in 389-ds-base did not comprehensively address the vulnerability. The issue stems from improper input validation when an authenticated user modifies the userPassword attribute, where malformed input can trigger a server crash [1][3].

Exploitation

Scenario

An attacker with valid credentials to the directory server can exploit this flaw by sending a specially crafted request to modify the userPassword field. No additional privileges beyond standard authentication are required, as the bug resides in the handling of password modification operations [2][3].

Impact

Successful exploitation results in a denial of service (DoS) condition, causing the 389 Directory Server process to crash. This disrupts directory services for all users, potentially impacting authentication and authorization systems that rely on the server [1][2].

Mitigation

Red Hat has addressed this vulnerability via RHSA-2024:7434, which updates 389-ds-base packages on Red Hat Enterprise Linux 9. Users are strongly encouraged to apply the available update to prevent exploitation [2].