Homepage

CVE-2024-3657 The advisory has been revoked - it doesn't affect any version of package 389-ds-base  (opens in a new tab)

Threat Intelligence

EPSS
1.28% (70th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN14-389DSBASE-11735427
  • published10 Aug 2025
  • disclosed28 May 2024
Report a new vulnerability Found a mistake?

Introduced: 28 May 2024

CVE-2024-3657  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:14.

NVD Description

Note: Versions mentioned in the description apply only to the upstream 389-ds-base package and not the 389-ds-base package as distributed by Debian.

A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service