The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4997 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fixes:

    * 389-ds-base: Unauthenticated user can trigger a DoS by sending a specific extended search request     (CVE-2024-6237) (2294858)

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953) (DIRSRV-137)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Users of Red Hat Directory Server 12 are advised to install these updated packages.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5690 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in     log_entry_attr) (CVE-2024-1062)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4021 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4021-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Andrej Shadura     January 19, 2025                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : 389-ds-base     Version        : 1.4.4.11-2+deb11u1     CVE ID         : CVE-2021-3652 CVE-2021-4091 CVE-2022-0918 CVE-2022-0996                      CVE-2022-2850 CVE-2024-2199 CVE-2024-3657 CVE-2024-5953                      CVE-2024-8445

    This update fixes multiple vulnerabilities in 389-ds-base LDAP server.

    CVE-2021-3652

        If an asterisk is imported as password hashes, either accidentally         or maliciously, then instead of being inactive, any password will         successfully match during authentication. This flaw allows an attacker         to successfully authenticate as a user whose password was disabled.

    CVE-2021-4091

        A double-free was found in the way 389-ds-base handles virtual         attributes context in persistent searches. An attacker could send a         series of search requests, forcing the server to behave unexpectedly,         and crash.

    CVE-2022-0918

        A vulnerability allows an unauthenticated attacker with network         access to the LDAP port to cause a denial of service. The denial of         service is triggered by a single message sent over a TCP connection,         no bind or other authentication is required. The message triggers         a segmentation fault that results in slapd crashing.

    CVE-2022-0996

        A vulnerability allows expired passwords to access the database to         cause improper authentication.

    CVE-2022-2850

        When the content synchronization plugin is enabled, an authenticated         user can reach a NULL pointer dereference using a specially         crafted query. This flaw allows an authenticated attacker to cause         a denial of service. This CVE is assigned against an incomplete fix         of CVE-2021-3514.

    CVE-2024-2199

        A denial of service vulnerability that may allow an authenticated         user to cause a server crash while modifying `userPassword` using         malformed input.

    CVE-2024-3657

        A specially-crafted LDAP query can potentially cause a failure on         the directory server, leading to a denial of service.

    CVE-2024-5953

        This issue may allow an authenticated user to cause a server denial         of service while attempting to log in with a user with a malformed         hash in their password.

    CVE-2024-8445

        The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover         all scenarios. In certain product versions, an authenticated user         may cause a server crash while modifying `userPassword` using         malformed input.

    For Debian 11 bullseye, these problems have been fixed in version     1.4.4.11-2+deb11u1.

    We recommend that you upgrade your 389-ds-base packages.

    For the detailed security status of 389-ds-base please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/389-ds-base

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2798 advisory.

    A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an     authenticated user to cause a server crash while modifying `userPassword` using malformed input.
    (CVE-2024-2199)

    A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the     directory server, leading to a denial of service (CVE-2024-3657)

    A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an     authenticated user to cause a server denial of service while attempting to log in with a user with a     malformed hash in their password. (CVE-2024-5953)

    The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product     versions, an authenticated user may cause a server crash while modifying `userPassword` using malformed     input. (CVE-2024-8445)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-6569 advisory.

    - Resolves: RHEL-40943 - CVE-2024-5953 389-ds:1.4/389-ds-base: Malformed userPassword hash may cause     Denial of Service [rhel-8.10.z]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6569 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0767 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2024-5953:
    A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an     authenticated user to cause a server denial of service while attempting to log in with a user with a     malformed hash in their password.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8806:01 advisory.

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5192 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

    * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request     (CVE-2024-6237)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5192 advisory.

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

    * 389-ds-base: unauthenticated user can trigger a DoS by sending a specific extended search request     (CVE-2024-6237)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an     authenticated user to cause a server denial of service while attempting to log in with a user with a     malformed hash in their password. (CVE-2024-5953)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3257-1 advisory.

    - Update to version 1.4.4.20~git3.e7ac6d87:
    - CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512)
    - CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277)
    - CVE-2024-2199: Malformed userPassword may cause crash at do_modify in slapd/modify.c. (bsc#1225507)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3843-1 advisory.

    - Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)
    - Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)
    - Update to version 2.2.10~git18.20ce9289:
      * RFE: Use previously extracted key path
      * Update dsidm to prioritize basedn from .dsrc over interactive input
      * UI: Instance fails to load when DB backup directory doesn't exist
      * Improve online import robustness when the server is under load
      * Ensure all slapi_log_err calls end format strings with newline character \n
      * RFE: when memberof is enabled, defer updates of members from the update of the group
      * Provide more information in the error message during setup_ol_tls_conn()
      * Wrong set of entries returned for some search filters
      * Schema lib389 object is not keeping custom schema data upon editing
      * UI: Fix audit issue with npm - micromatch
      * Fix long delay when setting replication agreement with dsconf
      * Changelog trims updates from a given RID even if a consumer has not received any of them
      * test_password_modify_non_utf8 should set default password storage scheme
      * Update Cargo.lock
      * Rearrange includes for 32-bit support logic
      * Fix fedora cop RawHide builds
      * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
      * Enabling replication for a sub suffix crashes browser
      * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes
      * Slow ldif2db import on a newly created BDB backend
      * Audit log buffering doesn't handle large updates
      * RFE: improve the performance of evaluation of filter component when tested against a large valueset     (like group members)
      * passwordHistory is not updated with a pre-hashed password
      * ns-slapd crash in referint_get_config
      * Fix the UTC offset print
      * Fix OpenLDAP version autodetection
      * RFE: add new operation note for MFA authentications
      * Add log buffering to audit log
      * Fix connection timeout error breaking errormap
      * Improve dsidm CLI No Such Entry handling
      * Improve connection timeout error logging
      * Add hidden -v and -j options to each CLI subcommand
      * Fix various issues with logconv.pl
      * Fix certificate lifetime displayed as NaN
      * Enhance Rust and JS bundling and add SPDX licenses for both
      * Remove audit-ci from dependencies
      * Fix unused variable warning from previous commit
      * covscan: fix memory leak in audit log when adding entries
      * Add a check for tagged commits
      * dscreate ds-root - accepts relative path
      * Change replica_id from str to int
      * Attribute Names changed to lowercase after adding the Attributes
      * ns-slapd crashes at startup if a backend has no suffix
      * During an update, if the target entry is reverted in the entry cache, the server should not retry to     lock it
      * Reversion of the entry cache should be limited to BETXN plugin failures
      * Disable Transparent Huge Pages
      * Freelist ordering causes high wtime
      * Security fix for CVE-2024-2199
    - VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request     (bsc#1225512)
    - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)
    - 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3844-1 advisory.

    - Persist extracted key path for ldap_ssl_client_init over repeat invocations (bsc#1230852)
    - Re-enable use of .dsrc basedn for dsidm commands (bsc#1231462)
    - Update to version 2.2.10~git18.20ce9289:
      * RFE: Use previously extracted key path
      * Update dsidm to prioritize basedn from .dsrc over interactive input
      * UI: Instance fails to load when DB backup directory doesn't exist
      * Improve online import robustness when the server is under load
      * Ensure all slapi_log_err calls end format strings with newline character \n
      * RFE: when memberof is enabled, defer updates of members from the update of the group
      * Provide more information in the error message during setup_ol_tls_conn()
      * Wrong set of entries returned for some search filters
      * Schema lib389 object is not keeping custom schema data upon editing
      * UI: Fix audit issue with npm - micromatch
      * Fix long delay when setting replication agreement with dsconf
      * Changelog trims updates from a given RID even if a consumer has not received any of them
      * test_password_modify_non_utf8 should set default password storage scheme
      * Update Cargo.lock
      * Rearrange includes for 32-bit support logic
      * Fix fedora cop RawHide builds
      * Bump braces from 3.0.2 to 3.0.3 in /src/cockpit/389-console
      * Enabling replication for a sub suffix crashes browser
      * d2entry - Could not open id2entry err 0 - at startup when having sub-suffixes
      * Slow ldif2db import on a newly created BDB backend
      * Audit log buffering doesn't handle large updates
      * RFE: improve the performance of evaluation of filter component when tested against a large valueset     (like group members)
      * passwordHistory is not updated with a pre-hashed password
      * ns-slapd crash in referint_get_config
      * Fix the UTC offset print
      * Fix OpenLDAP version autodetection
      * RFE: add new operation note for MFA authentications
      * Add log buffering to audit log
      * Fix connection timeout error breaking errormap
      * Improve dsidm CLI No Such Entry handling
      * Improve connection timeout error logging
      * Add hidden -v and -j options to each CLI subcommand
      * Fix various issues with logconv.pl
      * Fix certificate lifetime displayed as NaN
      * Enhance Rust and JS bundling and add SPDX licenses for both
      * Remove audit-ci from dependencies
      * Fix unused variable warning from previous commit
      * covscan: fix memory leak in audit log when adding entries
      * Add a check for tagged commits
      * dscreate ds-root - accepts relative path
      * Change replica_id from str to int
      * Attribute Names changed to lowercase after adding the Attributes
      * ns-slapd crashes at startup if a backend has no suffix
      * During an update, if the target entry is reverted in the entry cache, the server should not retry to     lock it
      * Reversion of the entry cache should be limited to BETXN plugin failures
      * Disable Transparent Huge Pages
      * Freelist ordering causes high wtime
      * Security fix for CVE-2024-2199
    - VUL-0: CVE-2024-3657: 389-ds: potential denial of service via specially crafted kerberos AS-REQ request     (bsc#1225512)
    - VUL-0: CVE-2024-5953: 389-ds: malformed userPassword hashes may cause a denial of service (bsc#1226277)
    - 389ds crash when user does change password using iso-8859-1 encoding (bsc#1228912)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1632 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(es):

    * 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in     log_entry_attr) (CVE-2024-1062)

    * 389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c (CVE-2024-2199)

    * 389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request (CVE-2024-3657)

    * 389-ds-base: Malformed userPassword hash may cause Denial of Service (CVE-2024-5953)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778892584 advisory.

  - A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an     authenticated user to cause a server crash while modifying `userPassword` using malformed input.
    (CVE-2024-2199)

  - A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an     authenticated user to cause a server denial of service while attempting to log in with a user with a     malformed hash in their password. (CVE-2024-5953)

  - A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation     through the ldap protocol, when the function return value is not tested and a NULL pointer is     dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead     to a Denial of Service (DoS) or system crash. (CVE-2025-2487)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
210486	RHEL 9 : redhat-ds:12 (RHSA-2024:4997)	Nessus	Red Hat Local Security Checks	2024/11/7	2026/3/3	medium
210573	RHEL 8 : 389-ds:1.4 (RHSA-2024:5690)	Nessus	Red Hat Local Security Checks	2024/11/8	2024/11/8	high
214393	Debian dla-4021 : 389-ds - security update	Nessus	Debian Local Security Checks	2025/1/20	2025/1/20	medium
233374	Amazon Linux 2 : 389-ds-base (ALAS-2025-2798)	Nessus	Amazon Linux Local Security Checks	2025/3/27	2025/3/27	high
207063	Oracle Linux 8 : 389-ds:1.4 (ELSA-2024-6569)	Nessus	Oracle Linux Local Security Checks	2024/9/12	2025/9/11	medium
210549	RHEL 8 : 389-ds:1.4 (RHSA-2024:6569)	Nessus	Red Hat Local Security Checks	2024/11/7	2025/4/29	medium
238588	TencentOS Server 3: 389-ds:1.4 (TSSA-2024:0767)	Nessus	Tencent Local Security Checks	2025/6/16	2025/12/4	medium
292435	MiracleLinux 8 : 389-ds:1.4 (AXSA:2024-8806:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
205381	RHEL 9 : 389-ds-base (RHSA-2024:5192)	Nessus	Red Hat Local Security Checks	2024/8/12	2025/3/28	medium
206046	Rocky Linux 9 : 389-ds-base (RLSA-2024:5192)	Nessus	Rocky Linux Local Security Checks	2024/8/21	2024/8/21	medium
230404	Linux Distros Unpatched Vulnerability : CVE-2024-5953	Nessus	Misc.	2025/3/6	2026/11/7	medium
207330	SUSE SLES15 Security Update : 389-ds (SUSE-SU-2024:3257-1)	Nessus	SuSE Local Security Checks	2024/9/17	2024/9/17	high
210036	SUSE SLES15 / openSUSE 15 Security Update : 389-ds (SUSE-SU-2024:3843-1)	Nessus	SuSE Local Security Checks	2024/11/1	2024/11/1	high
210037	SUSE SLES15 / openSUSE 15 Security Update : 389-ds (SUSE-SU-2024:3844-1)	Nessus	SuSE Local Security Checks	2024/11/1	2024/11/1	high
216404	RHEL 8 : redhat-ds:11 (RHSA-2025:1632)	Nessus	Red Hat Local Security Checks	2025/2/18	2025/6/5	high
351977	AlmaLinux 9.2 [TuxCare] Security Update: 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778892584)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/9/30	medium

检测

插件搜索

medium

high

medium

high

medium

medium

medium

medium

medium

medium

medium

high

high

high

high

medium