Lucene search
+L

62 matches found

OSV
OSV
•added 2022/10/14 6:15 p.m.•10 views

DEBIAN-CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.6AI score0.01304EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/14 6:15 p.m.•33 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.2AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/10/14 6:15 p.m.•47 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.7AI score0.01304EPSS
SaveExploits1References4
OSV
OSV
•added 2022/10/14 6:15 p.m.•23 views

UBUNTU-CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.7AI score0.01304EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/10/14 12:00 a.m.•10 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.3AI score0.01304EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•67 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5AI score0.01304EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•0 views

CVE-2022-2850: NULL Pointer Dereference

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.4AI score0.01304EPSS
SaveExploits1References3
CVE
CVE
•added 2022/10/14 12:00 a.m.•265 views

CVE-2022-2850

Summary: CVE-2022-2850 affects 389-ds-base where the Content Synchronization plugin, when enabled, allows an authenticated user to trigger a NULL pointer dereference and cause a denial of service. This entry is tied to an incomplete fix for CVE-2021-3514. What’s affected (from connected docs): 38...

6.5CVSS6.3AI score0.01304EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
•added 2022/10/14 12:00 a.m.•59 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix ...

6.5CVSS6.6AI score0.01304EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/10/10 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-2437)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01304EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/10/08 12:00 a.m.•44 views

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-2437)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer...

6.5CVSS6.6AI score0.01304EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2022/08/16 5:25 p.m.•47 views

CVE-2022-2850

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS3.8AI score0.01304EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/04 12:00 a.m.•22 views

PT-2022-6792 · Red Hat +6 · 389-Ds-Base +7

Name of the Vulnerable Software and Affected Versions: 389-ds-base affected versions not specified Description: A flaw in the Content Synchronization plugin of 389 Directory Server allows an authenticated attacker to cause a denial of service by exploiting a NULL pointer dereference using a...

7.5CVSS6AI score0.08202EPSS
SaveExploits4References103
RedHat Linux
RedHat Linux
•added 2022/03/16 3:22 p.m.•17 views

389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS5.8AI score0.012EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/10/25 6:38 a.m.•10 views

389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS5.8AI score0.012EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/07/21 12:04 a.m.•11 views

389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS5.8AI score0.012EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/06/29 8:42 p.m.•13 views

389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS5.8AI score0.012EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/04/27 8:17 a.m.•51 views

CVE-2021-3514

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...

6.5CVSS2.9AI score0.012EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/02/13 3:00 p.m.•13 views

Important: Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update

Updated Satellite 6.6 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clien...

7.5CVSS6.7AI score0.28384EPSS
SaveExploits1References16
Veracode
Veracode
•added 2019/05/02 5:20 a.m.•29 views

Unprotected Storage Of Credentials

Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs provisioning and configuration management of predefined standard operating...

7.5CVSS8.1AI score0.02839EPSS
SaveExploits0References241Affected Software37
Rows per page
Query Builder