AZL-110315

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110315.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-110315

Upstream

CVE-2024-8445

Published

2024-09-05T15:15:16Z

Modified

2026-10-25T05:33:20Z

Summary

CVE-2024-8445 affecting package 389-ds-base 3.1.1-12

Details

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying userPassword using malformed input.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-8445

Affected packages

Azure Linux:3 / 389-ds-base

Package

Name: 389-ds-base
Purl: pkg:rpm/azure-linux/389-ds-base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

3.1.1-12

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110315.json"