CVE-2024-8445: Red Hat Directory Server 11

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authenticated user may cause a server crash while modifying `userPassword` using malformed input.

Affected products

• Red Hat Red Hat Directory Server 11
• Red Hat Red Hat Directory Server 12
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: before 0:1.3.11.1-7.el7_9 (fixed in 0:1.3.11.1-7.el7_9)
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9

Published 2024-09-05. Last modified 2026-06-17.