The 389 Directory Server (389-ds-base) contains two security vulnerabilities. CVE-2024-3657 is a potential denial of service vulnerability triggered by a specially crafted Kerberos AS-REQ request. CVE-2024-2199 is a vulnerability where a malformed userPassword input may cause a crash in the do_modify function within slapd/modify.c. These vulnerabilities affect Red Hat Enterprise Linux 9 and its extended update support and related product variants. Red Hat has released security updates to fix these issues as detailed in advisory RHSA-2024:3837. No CVSS scores are provided in the advisory, but the issues are rated as important/high severity. The advisory recommends applying the update to mitigate these vulnerabilities.

Successful exploitation of CVE-2024-3657 could cause a denial of service condition in the 389 Directory Server by processing a specially crafted Kerberos AS-REQ request. CVE-2024-2199 could cause the server to crash when handling a malformed userPassword during modification operations, potentially disrupting directory services. Both vulnerabilities impact availability of the LDAP service. There are no known exploits in the wild at this time. The severity is rated as high by Red Hat Product Security.

Red Hat has released an official security update for 389-ds-base as part of Red Hat Enterprise Linux 9 updates. Users should apply this update promptly to remediate the vulnerabilities. Before applying the update, ensure all previously released relevant errata have been applied. Detailed update instructions are available from Red Hat's official documentation. No alternative mitigations or workarounds are specified in the advisory.