The 389 Directory Server (389-ds) version 1.4, an LDAPv3 compliant server included in Red Hat Enterprise Linux 8.8 Extended Update Support, contains multiple vulnerabilities: CVE-2024-1062 is a heap overflow in log_entry_attr that can cause denial of service when writing values larger than 256 characters; CVE-2024-2199 and CVE-2024-5953 involve malformed userPassword attributes or hashes that may cause server crashes or denial of service during modification operations; CVE-2024-3657 allows potential denial of service via specially crafted Kerberos AS-REQ requests. Red Hat has issued an important security advisory RHSA-2024:5690 with updated packages to fix these issues. No CVSS scores are provided in the advisory. No known active exploits have been reported.

Successful exploitation of these vulnerabilities can lead to denial of service conditions on the 389 Directory Server, causing service crashes or unavailability. The heap overflow and malformed input handling issues may disrupt LDAP directory services, impacting authentication and directory queries. There is no indication of privilege escalation or data disclosure. No known exploits are currently reported in the wild.

Red Hat has released updated 389-ds packages as part of Red Hat Enterprise Linux 8.8 Extended Update Support to address these vulnerabilities. Users should apply the security update RHSA-2024:5690 promptly to remediate these issues. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.