CVE-2022-0918
Fixed in a distro release EPSS 6%
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Products: port389 389-ds-base, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | 389-ds-base | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 8 | 389-ds-base-devel | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 8 | 389-ds-base-legacy-tools | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 8 | 389-ds-base-libs | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 8 | 389-ds-base-snmp | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 8 | python3-lib389 | 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c |
| AlmaLinux 9 | 389-ds-base | 2.1.3-4.el9_1 |
| AlmaLinux 9 | 389-ds-base-libs | 2.1.3-4.el9_1 |
| AlmaLinux 9 | python3-lib389 | 2.1.3-4.el9_1 |
| Amazon Linux 2 | 389-ds-base | 1.3.10.2-16.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-devel | 1.3.10.2-16.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-libs | 1.3.10.2-16.amzn2.0.1 |
| Amazon Linux 2 | 389-ds-base-snmp | 1.3.10.2-16.amzn2.0.1 |
| Debian 10 | 389-ds-base | 1.4.0.21-1+deb10u1 |
| Debian 11 | 389-ds-base | 1.4.4.11-2+deb11u1 |
| Debian 12 | 389-ds-base | 2.0.15-1.1 |
| Debian 13 | 389-ds-base | 2.0.15-1.1 |
| Red Hat directory server 11.5 | 389-ds-base | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-debuginfo | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-debugsource | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-devel | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-legacy-tools | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-libs | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-libs-debuginfo | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-snmp | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | 389-ds-base-snmp-debuginfo | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | cockpit-389-ds | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat directory server 11.5 | python3-lib389 | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
| Red Hat Enterprise Linux 7 | 389-ds-base | 0:1.3.10.2-16.el7_9 |
| Red Hat Enterprise Linux 7 | 389-ds-base-debuginfo | 0:1.3.10.2-16.el7_9 |
| Red Hat Enterprise Linux 7 | 389-ds-base-devel | 0:1.3.10.2-16.el7_9 |
| Red Hat Enterprise Linux 7 | 389-ds-base-libs | 0:1.3.10.2-16.el7_9 |
| Red Hat Enterprise Linux 7 | 389-ds-base-snmp | 0:1.3.10.2-16.el7_9 |
| Red Hat Enterprise Linux 8 | 389-ds-base | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-debuginfo | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-debugsource | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-devel | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-legacy-tools | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-libs | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-libs-debuginfo | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-snmp | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | 389-ds-base-snmp-debuginfo | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 8 | python3-lib389 | 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 |
| Red Hat Enterprise Linux 9 | 389-ds-base | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | 389-ds-base-debuginfo | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | 389-ds-base-debugsource | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | 389-ds-base-libs | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | 389-ds-base-libs-debuginfo | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | 389-ds-base-snmp-debuginfo | 0:2.1.3-4.el9_1 |
| Red Hat Enterprise Linux 9 | python3-lib389 | 0:2.1.3-4.el9_1 |
| Red Hat rhel eus 8.4 | 389-ds-base | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-debuginfo | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-debugsource | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-devel | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-legacy-tools | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-legacy-tools-debuginfo | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-libs | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-libs-debuginfo | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-snmp | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | 389-ds-base-snmp-debuginfo | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 8.4 | python3-lib389 | 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1 |
| Red Hat rhel eus 9.0 | 389-ds-base | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | 389-ds-base-debuginfo | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | 389-ds-base-debugsource | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | 389-ds-base-libs | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | 389-ds-base-libs-debuginfo | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | 389-ds-base-snmp-debuginfo | 0:2.0.14-3.el9_0 |
| Red Hat rhel eus 9.0 | python3-lib389 | 0:2.0.14-3.el9_0 |
| Rocky Linux 8 | 389-ds-base | 0:1.4.3.28-7.module+el8.6.0+994+f0479f39 |
| Rocky Linux 9 | 389-ds-base | 0:2.1.3-4.el9_1 |
| SUSE Enterprise Storage 6 | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Enterprise Storage 7 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | 389-ds | 1.4.0.31~git13.e5e55afa0-150000.4.24.1 |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | 389-ds | 1.4.0.31~git13.e5e55afa0-150000.4.24.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP3 | 389-ds | 1.4.4.19~git28.b12c72226-150300.3.12.1 |
| SUSE Linux Enterprise Real Time 15 SP2 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise Server 15 SP1-BCL | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise Server 15 SP2-BCL | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Linux Enterprise Server 15-LTSS | 389-ds | 1.4.0.31~git13.e5e55afa0-150000.4.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 | 389-ds | 1.4.0.31~git13.e5e55afa0-150000.4.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | 389-ds | 1.4.2.16~git68.efa843752-150100.7.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Manager Proxy 4.1 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Manager Retail Branch Server 4.1 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| SUSE Manager Server 4.1 | 389-ds | 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1 |
| Ubuntu 22.04 LTS | 389-ds-base | no fix |
| Ubuntu 24.04 LTS | 389-ds-base | no fix |
| Ubuntu 25.10 | 389-ds-base | no fix |
| Ubuntu 26.04 LTS | 389-ds-base | no fix |
| Ubuntu 26.10 | 389-ds-base | no fix |
| Ubuntu Pro 16.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 18.04 LTS | 389-ds-base | no fix |
| Ubuntu Pro 20.04 LTS | 389-ds-base | no fix |
| openSUSE Leap 15.3 | 389-ds | 1.4.4.19~git28.b12c72226-150300.3.12.1 |
| openSUSE Tumbleweed | 389-ds | 2.1.1~git4.b7f891097-1.1 |