CVE-2022-0918

2022-03-1614:04:23

redhat

www.cve.org

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "389-ds-base",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.4"
      }
    ]
  }
]