Lucene search
Veracode Vulnerability DatabaseVERACODE:37967HistoryNov 10, 2022 - 12:44 a.m.
Denial Of Service (DoS)
2022-11-1000:44:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
denial of service
389-ds-base
vulnerability
content synchronization
null pointer dereference
maliciously crafted query
application crash
EPSS
0.001
Percentile
42.5%
389-ds-base is vulnerable to denial of service. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query
Affected configurations
Node
389-ds-baseMatch1.3.10.2_13.el7_9
OR389-ds-baseMatch1.2.11.15_85.el6_8
OR389-ds-baseMatch1.3.7.5_19.el7_5
OR389-ds-baseMatch1.3.10.2_8.el7_9
OR389-ds-baseMatch1.2.11.15_12.el6_4
OR389-ds-baseMatch1.3.10.1_5.el7
OR389-ds-baseMatch1.2.11.15_91.el6_9
OR389-ds-baseMatch1.2.11.15_60.el6
OR389-ds-baseMatch1.2.11.15_72.el6_7
OR389-ds-baseMatch1.3.9.1_10.el7
OR389-ds-baseMatch1.2.10.2_20.el6_3
OR389-ds-baseMatch1.3.3.1_20.ael7b_1
OR389-ds-baseMatch1.2.11.15_31.el6_5
OR389-ds-baseMatch1.2.10.2_18.el6_3
OR389-ds-baseMatch1.3.9.1_13.el7_7
OR389-ds-baseMatch1.3.7.5_21.el7_5
OR389-ds-baseMatch1.3.7.5_18.el7
OR389-ds-baseMatch1.2.11.15_11.el6
OR389-ds-baseMatch1.2.8.2_1.el6
OR389-ds-baseMatch1.2.11.15_68.el6_7
OR389-ds-baseMatch1.2.11.15_94.el6_9
OR389-ds-baseMatch1.2.11.15_34.el6_5
OR389-ds-baseMatch1.2.11.15_65.el6_7
OR389-ds-baseMatch1.2.11.15_69.el6_7
OR389-ds-baseMatch1.3.10.2_15.el7_9
OR389-ds-baseMatch1.2.11.15_75.el6_8
OR389-ds-baseMatch1.2.11.15_89.el6
OR389-ds-baseMatch1.3.7.5_24.el7_5
OR389-ds-baseMatch1.3.10.2_9.el7_9
OR389-ds-baseMatch1.3.8.4_23.el7_6
OR389-ds-baseMatch1.3.10.2_16.el7_9
OR389-ds-baseMatch1.3.3.1_23.ael7b_1
OR389-ds-baseMatch1.3.8.4_18.el7_6
OR389-ds-baseMatch1.2.11.15_46.el6
OR389-ds-baseMatch1.2.11.15_50.el6_6
OR389-ds-baseMatch1.2.11.15_30.el6_5
OR389-ds-baseMatch1.2.11.15_45.el6
OR389-ds-baseMatch1.2.11.15_47.el6
OR389-ds-baseMatch1.2.11.15_20.el6_4
OR389-ds-baseMatch1.2.8.2_1.el6_1.3
OR389-ds-baseMatch1.2.11.15_62.el6_7
OR389-ds-baseMatch1.2.11.15_97.el6_10
OR389-ds-baseMatch1.3.10.2_10.el7_9
OR389-ds-baseMatch1.2.11.15_95.el6_9
OR389-ds-baseMatch1.3.8.4_22.el7_6
OR389-ds-baseMatch1.3.10.2_6.el7
OR389-ds-baseMatch1.3.9.1_12.el7_7
OR389-ds-baseMatch1.2.11.15_22.el6_4
OR389-ds-baseMatch1.2.11.15_29.el6
OR389-ds-baseMatch1.2.9.14_1.el6
OR389-ds-baseMatch1.2.9.14_1.el6_2.2
OR389-ds-baseMatch1.3.10.2_7.1.el7_9
OR389-ds-baseMatch1.2.11.15_14.el6_4
OR389-ds-baseMatch2.0.14_7.module+el9dsrv+14845+69b2f526
OR389-ds-baseMatch1.2.11.15_33.el6_5
OR389-ds-baseMatch1.3.7.5_28.el7_5
OR389-ds-baseMatch1.3.10.2_14.el7_9
OR389-ds-baseMatch1.2.11.15_74.el6
OR389-ds-baseMatch1.2.10.2_15.el6
OR389-ds-baseMatch1.3.10.1_9.el7_8
OR389-ds-baseMatch1.3.3.1_16.ael7b_1
OR389-ds-baseMatch1.3.8.4_15.el7
OR389-ds-baseMatch1.3.10.2_12.el7_9
OR389-ds-baseMatch1.2.11.15_48.el6_6
OR389-ds-baseMatch1.3.10.1_14.el7_8
OR389-ds-baseMatch1.3.7.5_25.el7_5
OR389-ds-baseMatch1.3.8.4_25.1.el7_6
OR389-ds-baseMatch1.2.11.15_32.el6_5
OR389-ds-baseMatch1.2.11.15_84.el6_8
OR-389-ds-base\Matchsid1.4.4.8-1
OR-389-ds-base\Matchsid1.4.4.16-1
OR389-ds-baseMatch1.3.10.2_13.el7_9
OR389-ds-baseMatch1.2.11.15_85.el6_8
OR389-ds-baseMatch1.3.7.5_19.el7_5
OR389-ds-baseMatch1.3.10.2_8.el7_9
OR389-ds-baseMatch1.2.11.15_12.el6_4
OR389-ds-baseMatch1.3.10.1_5.el7
OR389-ds-baseMatch1.2.11.15_91.el6_9
OR389-ds-baseMatch1.2.11.15_60.el6
OR389-ds-baseMatch1.2.11.15_72.el6_7
OR389-ds-baseMatch1.3.9.1_10.el7
OR389-ds-baseMatch1.2.10.2_20.el6_3
OR389-ds-baseMatch1.3.3.1_20.ael7b_1
OR389-ds-baseMatch1.2.11.15_31.el6_5
OR389-ds-baseMatch1.2.10.2_18.el6_3
OR389-ds-baseMatch1.3.9.1_13.el7_7
OR389-ds-baseMatch1.3.7.5_21.el7_5
OR389-ds-baseMatch1.3.7.5_18.el7
OR389-ds-baseMatch1.2.11.15_11.el6
OR389-ds-baseMatch1.2.8.2_1.el6
OR389-ds-baseMatch1.2.11.15_68.el6_7
OR389-ds-baseMatch1.2.11.15_94.el6_9
OR389-ds-baseMatch1.2.11.15_34.el6_5
OR389-ds-baseMatch1.2.11.15_65.el6_7
OR389-ds-baseMatch1.2.11.15_69.el6_7
OR389-ds-baseMatch1.3.10.2_15.el7_9
OR389-ds-baseMatch1.2.11.15_75.el6_8
OR389-ds-baseMatch1.2.11.15_89.el6
OR389-ds-baseMatch1.3.7.5_24.el7_5
OR389-ds-baseMatch1.3.10.2_9.el7_9
OR389-ds-baseMatch1.3.8.4_23.el7_6
OR389-ds-baseMatch1.3.10.2_16.el7_9
OR389-ds-baseMatch1.3.3.1_23.ael7b_1
OR389-ds-baseMatch1.3.8.4_18.el7_6
OR389-ds-baseMatch1.2.11.15_46.el6
OR389-ds-baseMatch1.2.11.15_50.el6_6
OR389-ds-baseMatch1.2.11.15_30.el6_5
OR389-ds-baseMatch1.2.11.15_45.el6
OR389-ds-baseMatch1.2.11.15_47.el6
OR389-ds-baseMatch1.2.11.15_20.el6_4
OR389-ds-baseMatch1.2.8.2_1.el6_1.3
OR389-ds-baseMatch1.2.11.15_62.el6_7
OR389-ds-baseMatch1.2.11.15_97.el6_10
OR389-ds-baseMatch1.3.10.2_10.el7_9
OR389-ds-baseMatch1.2.11.15_95.el6_9
OR389-ds-baseMatch1.3.8.4_22.el7_6
OR389-ds-baseMatch1.3.10.2_6.el7
OR389-ds-baseMatch1.3.9.1_12.el7_7
OR389-ds-baseMatch1.2.11.15_22.el6_4
OR389-ds-baseMatch1.2.11.15_29.el6
OR389-ds-baseMatch1.2.9.14_1.el6
OR389-ds-baseMatch1.2.9.14_1.el6_2.2
OR389-ds-baseMatch1.3.10.2_7.1.el7_9
OR389-ds-baseMatch1.2.11.15_14.el6_4
OR389-ds-baseMatch2.0.14_7.module+el9dsrv+14845+69b2f526
OR389-ds-baseMatch1.2.11.15_33.el6_5
OR389-ds-baseMatch1.3.7.5_28.el7_5
OR389-ds-baseMatch1.3.10.2_14.el7_9
OR389-ds-baseMatch1.2.11.15_74.el6
OR389-ds-baseMatch1.2.10.2_15.el6
OR389-ds-baseMatch1.3.10.1_9.el7_8
OR389-ds-baseMatch1.3.3.1_16.ael7b_1
OR389-ds-baseMatch1.3.8.4_15.el7
OR389-ds-baseMatch1.3.10.2_12.el7_9
OR389-ds-baseMatch1.2.11.15_48.el6_6
OR389-ds-baseMatch1.3.10.1_14.el7_8
OR389-ds-baseMatch1.3.7.5_25.el7_5
OR389-ds-baseMatch1.3.8.4_25.1.el7_6
OR389-ds-baseMatch1.2.11.15_32.el6_5
OR389-ds-baseMatch1.2.11.15_84.el6_8
OR-389-ds-base\Matchsid1.4.4.8-1
OR-389-ds-base\Matchsid1.4.4.16-1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| * | 389-ds-base | 1.3.10.2_13.el7_9 | cpe:2.3:a:*:389-ds-base:1.3.10.2_13.el7_9:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.2.11.15_85.el6_8 | cpe:2.3:a:*:389-ds-base:1.2.11.15_85.el6_8:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.3.7.5_19.el7_5 | cpe:2.3:a:*:389-ds-base:1.3.7.5_19.el7_5:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.3.10.2_8.el7_9 | cpe:2.3:a:*:389-ds-base:1.3.10.2_8.el7_9:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.2.11.15_12.el6_4 | cpe:2.3:a:*:389-ds-base:1.2.11.15_12.el6_4:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.3.10.1_5.el7 | cpe:2.3:a:*:389-ds-base:1.3.10.1_5.el7:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.2.11.15_91.el6_9 | cpe:2.3:a:*:389-ds-base:1.2.11.15_91.el6_9:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.2.11.15_60.el6 | cpe:2.3:a:*:389-ds-base:1.2.11.15_60.el6:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.2.11.15_72.el6_7 | cpe:2.3:a:*:389-ds-base:1.2.11.15_72.el6_7:*:*:*:*:*:*:* |
| * | 389-ds-base | 1.3.9.1_10.el7 | cpe:2.3:a:*:389-ds-base:1.3.9.1_10.el7:*:*:*:*:*:*:* |
References
access.redhat.com/errata/RHSA-2022:7087
access.redhat.com/errata/RHSA-2022:7133
access.redhat.com/errata/RHSA-2022:8162
access.redhat.com/errata/RHSA-2022:8680
access.redhat.com/errata/RHSA-2022:8886
access.redhat.com/errata/RHSA-2022:8976
access.redhat.com/errata/RHSA-2023:0479
access.redhat.com/security/cve/CVE-2022-2850
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=2118691
lists.debian.org/debian-lts-announce/2023/04/msg00026.html
Related
oraclelinux
oraclelinux
389-ds-base security and bug fix update
2022-10-25 00:00:00
389-ds:1.4 security update
2022-10-27 00:00:00
389-ds-base security, bug fix, and enhancement update
2022-11-22 00:00:00
osv
osv
Moderate: 389-ds:1.4 security update
2022-10-25 07:33:40
Red Hat Security Advisory: 389-ds-base security and bug fix update
2024-09-16 08:30:54
redhat
redhat
(RHSA-2022:8886) Moderate: redhat-ds:11 security, bug fix, and enhancement update
2022-12-07 11:50:35
(RHSA-2023:0479) Moderate: redhat-ds:12 security update
2023-01-26 17:09:48
(RHSA-2022:8680) Moderate: 389-ds:1.4 security update
2022-11-29 13:29:29
nessus
nessus
RHEL 7 : 389-ds-base (RHSA-2022:7087)
2022-10-25 00:00:00
Oracle Linux 7 : 389-ds-base (ELSA-2022-7087)
2022-10-25 00:00:00
Oracle Linux 8 : 389-ds:1.4 (ELSA-2022-7133)
2022-10-27 00:00:00
openvas
openvas
openSUSE: Security Advisory for 389-ds (SUSE-SU-2022:3029-1)
2022-09-06 00:00:00
CentOS: Security Advisory for 389-ds-base (CESA-2022:7087)
2022-10-27 00:00:00
openSUSE: Security Advisory for 389-ds (SUSE-SU-2022:3286-1)
2022-09-17 00:00:00
suse
suse
Security update for 389-ds (moderate)
2022-09-16 00:00:00
Security update for 389-ds (moderate)
2022-09-05 00:00:00
rocky
rocky
389-ds:1.4 security update
2022-10-25 07:33:40
389-ds-base security, bug fix, and enhancement update
2022-11-15 06:17:19
centos
centos
389 security update
2022-10-26 14:16:15
almalinux
almalinux
Moderate: 389-ds:1.4 security update
2022-10-25 00:00:00
Moderate: 389-ds-base security, bug fix, and enhancement update
2022-11-15 00:00:00
amazon
amazon
Medium: 389-ds-base
2022-12-01 20:31:00
redhatcve
redhatcve
CVE-2022-2850
2022-08-16 17:25:03
nvd
nvd
CVE-2022-2850
2022-10-14 18:15:14
cvelist
cvelist
CVE-2022-2850
2022-10-14 00:00:00
mageia
mageia
Updated 389-ds-base packages fix security vulnerability
2022-11-08 22:44:28
ubuntucve
ubuntucve
CVE-2022-2850
2022-10-14 00:00:00
debiancve
debiancve
CVE-2022-2850
2022-10-14 18:15:14
prion
prion
Null pointer dereference
2022-10-14 18:15:00
cve
cve
CVE-2022-2850
2022-10-14 18:15:14
debian
debian
[SECURITY] [DLA 3399-1] 389-ds-base security update
2023-04-24 05:25:20