CVE-2024-5953: 389-ds-base: malformed userpassword hash may cause denial of service

Description

A denial of service vulnerability was found in the 389-ds-base LDAP server. This issue may allow an authenticated user to cause a server denial of service while attempting to log in with a user with a malformed hash in their password.

Classification

CVE ID: CVE-2024-5953

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.6% (probability of being exploited)

EPSS Percentile: 66.64% (scored less or equal to compared to others)

EPSS Date: 2025-03-19 (when was this score calculated)

References

Timeline

2025-02-19 00:31:36 UTC
CVE

389-ds-base: malformed userpassword hash may cause denial of service
2025-03-06 09:45:39 UTC
Tenable Plugins

Linux Distros Unpatched Vulnerability : CVE-2024-5953