A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2022-0918 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2055815 | Issue Tracking Third Party Advisory |
| https://github.com/389ds/389-ds-base/issues/5242 | Issue Tracking Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html | |
| https://access.redhat.com/security/cve/CVE-2022-0918 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2055815 | Issue Tracking Third Party Advisory |
| https://github.com/389ds/389-ds-base/issues/5242 | Issue Tracking Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html |
Configurations
History
13 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing. |
Information
Published : 2022-03-16 15:15
Updated : 2025-02-13 17:15
NVD link : CVE-2022-0918
Mitre link : CVE-2022-0918
CVE.ORG link : CVE-2022-0918
JSON object : View
Products Affected
port389
- 389-ds-base
redhat
- enterprise_linux
CWE