CVE-2022-0918: High severity red hat 389 directory server vulnerability
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-0918?
CVE-2022-0918 is a vulnerability in the 389 Directory Server that allows an unauthenticated attacker to cause a denial of service.
How severe is CVE-2022-0918?
CVE-2022-0918 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2022-0918?
CVE-2022-0918 affects 389-ds-base version 1.4.0 and Redhat Enterprise Linux 8.0.
How can an attacker exploit CVE-2022-0918?
An attacker with network access to the LDAP port can exploit CVE-2022-0918 by sending a single message over a TCP connection, no authentication required.
Is there a fix for CVE-2022-0918?
Yes, a fix for CVE-2022-0918 is available. It is recommended to update to the latest version of 389-ds-base or apply the appropriate patch for Redhat Enterprise Linux.