CVE-2024-1062: redhat 389 directory server +12 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2024-1062

CVSS 5.5 · Medium EPSS 0,31%

Kerentanan Heap-based Buffer Overflow pada redhat 389 directory server, redhat directory server +11 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut redhat.com.

Deskripsi (NVD)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.

Rincian

Terbit di NVD: 12 Februari 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-122: Heap-based Buffer Overflow
EPSS (30 hari): 0,31% peluang dieksploitasi; lebih tinggi dari 21,7% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
redhat	389 directory server	Semua versi sebelum 2.2.0
redhat	directory server	Semua versi
redhat	directory server	Versi 11.7
redhat	directory server	Versi 11.8
fedoraproject	fedora	Versi 39
fedoraproject	fedora	Versi 40
fedoraproject	fedora	Versi 41
redhat	directory server	Versi 12.0
redhat	enterprise linux	Versi 8.0
redhat	enterprise linux eus	Versi 8.6
redhat	enterprise linux eus	Versi 8.8
redhat	enterprise linux eus	Versi 9.2
redhat	enterprise linux for arm 64 eus	Versi 8.6
redhat	enterprise linux for arm 64 eus	Versi 8.8
redhat	enterprise linux for arm 64 eus	Versi 9.2
redhat	enterprise linux for ibm z systems	Versi 9.2
redhat	enterprise linux for ibm z systems eus	Versi 8.8
redhat	enterprise linux for power little endian eus	Versi 8.8
redhat	enterprise linux for power little endian eus	Versi 9.2
redhat	enterprise linux server aus	Versi 8.6
redhat	enterprise linux server aus	Versi 9.2
redhat	enterprise linux server for power little endian update services for sap solutions	Versi 8.6
redhat	enterprise linux server for power little endian update services for sap solutions	Versi 8.8
redhat	enterprise linux server for power little endian update services for sap solutions	Versi 9.2
redhat	enterprise linux server tus	Versi 8.6
redhat	enterprise linux server tus	Versi 8.8
redhat	enterprise linux update services for sap solutions	Versi 8.6
redhat	enterprise linux update services for sap solutions	Versi 8.8

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://access.redhat.com/errata/RHSA-2024:1074 advisory vendor
https://access.redhat.com/errata/RHSA-2024:1372 advisory vendor
https://access.redhat.com/errata/RHSA-2024:3047 advisory vendor
https://access.redhat.com/errata/RHSA-2024:4209 advisory vendor
https://access.redhat.com/errata/RHSA-2024:4633 advisory vendor
https://access.redhat.com/errata/RHSA-2024:5690 advisory vendor
https://access.redhat.com/errata/RHSA-2024:7458 advisory vendor
https://access.redhat.com/security/cve/CVE-2024-1062 advisory vendor
https://bugzilla.redhat.com/show_bug.cgi?id=2256711 issue tracking · advisory vendor
https://bugzilla.redhat.com/show_bug.cgi?id=2261879 issue tracking · advisory vendor
https://access.redhat.com/errata/RHSA-2025:1632

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.