CVE-2022-0918: High severity Port389 389-ds-base vulnerability
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.3.1+dfsg1-1+deb12u1Fixed in 3.1.2+dfsg1-1+deb13u1Fixed in 3.3.1-3 - Upgrade
Upgrade
debian/389-ds-baseto a version that resolves this vulnerability.Fixed in 2.0.15-1.1
Event History
Frequently Asked Questions
What is CVE-2022-0918?
CVE-2022-0918 is a vulnerability in the 389 Directory Server that allows an unauthenticated attacker to cause a denial of service.
How severe is CVE-2022-0918?
CVE-2022-0918 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2022-0918?
CVE-2022-0918 affects 389-ds-base version 1.4.0 and Redhat Enterprise Linux 8.0.
How can an attacker exploit CVE-2022-0918?
An attacker with network access to the LDAP port can exploit CVE-2022-0918 by sending a single message over a TCP connection, no authentication required.
Is there a fix for CVE-2022-0918?
Yes, a fix for CVE-2022-0918 is available. It is recommended to update to the latest version of 389-ds-base or apply the appropriate patch for Redhat Enterprise Linux.