UBUNTU-CVE-2022-0918
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-0918
Summary:
Details: A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
References: https://ubuntu.com/security/CVE-2022-0918, https://bugzilla.redhat.com/show_bug.cgi?id=2055815, https://access.redhat.com/security/cve/CVE-2022-0918, https://www.cve.org/CVERecord?id=CVE-2022-0918
Affected packages
Package
Name: 389-ds-base
Purl: pkg:deb/ubuntu/389-ds-base?arch=source&distro=esm-apps%2Fxenial
Affected ranges
Type: ECOSYSTEM
Events:
