CVE-2024-2199: Improper Input Validation
A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.
AI Analysis
Technical Summary
The vulnerability CVE-2024-2199 in 389-ds-base LDAP server arises from improper input validation of the userPassword attribute during modification operations. An authenticated user can send malformed input that triggers a crash in the do_modify function within slapd/modify.c, resulting in a denial of service. Red Hat has issued security advisories RHSA-2024:3591 and RHSA-2024:3837 providing patches for affected Red Hat Enterprise Linux 7 and 9 distributions. The updates fix the issue by correcting input handling to prevent server crashes caused by malformed userPassword values.
Potential Impact
Successful exploitation leads to denial of service by crashing the LDAP server, disrupting directory services. The vulnerability requires authenticated access but does not impact confidentiality or integrity. The CVSS v3.1 base score is 5.7 (medium severity), reflecting the attack vector as adjacent network, low attack complexity, and no user interaction required.
Mitigation Recommendations
Red Hat has released official security updates for affected versions of 389-ds-base on Red Hat Enterprise Linux 7 and 9. Applying these updates will remediate the vulnerability and automatically restart the 389 server service. Users should follow Red Hat's guidance at https://access.redhat.com/articles/11258 to apply the patches promptly. No additional mitigation is required beyond installing the official fixes.
CVE-2024-2199: Improper Input Validation
Description
A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.
CVSS v3.1
Score 5.7medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2024-2199 in 389-ds-base LDAP server arises from improper input validation of the userPassword attribute during modification operations. An authenticated user can send malformed input that triggers a crash in the do_modify function within slapd/modify.c, resulting in a denial of service. Red Hat has issued security advisories RHSA-2024:3591 and RHSA-2024:3837 providing patches for affected Red Hat Enterprise Linux 7 and 9 distributions. The updates fix the issue by correcting input handling to prevent server crashes caused by malformed userPassword values.
Potential Impact
Successful exploitation leads to denial of service by crashing the LDAP server, disrupting directory services. The vulnerability requires authenticated access but does not impact confidentiality or integrity. The CVSS v3.1 base score is 5.7 (medium severity), reflecting the attack vector as adjacent network, low attack complexity, and no user interaction required.
Mitigation Recommendations
Red Hat has released official security updates for affected versions of 389-ds-base on Red Hat Enterprise Linux 7 and 9. Applying these updates will remediate the vulnerability and automatically restart the 389 server service. Users should follow Red Hat's guidance at https://access.redhat.com/articles/11258 to apply the patches promptly. No additional mitigation is required beyond installing the official fixes.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2024-03-05T18:54:52.210Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2024:3591","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:3837","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:4092","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:4209","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:4210","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:4235","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:4633","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2024:5690","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:1632","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2024-2199","vendor":"Red Hat"}]
Threat ID: 69092149fe7723195e054423
Added to database: 11/03/2025, 21:40:25 UTC
Last enriched: 06/26/2026, 12:23:52 UTC
Last updated: 09/10/2026, 19:36:48 UTC
Views: 237
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.