CVE-2022-0918

389-ds-base: Resolves: Bug 2081014 - 389-ds:1.4/389-ds-base: sending crafted message could result in DoS

CVE-2022-0918 is fixed in 6 products on 1 platform, first by DEBIAN-CVE-2022-0918, released March 16, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
MODERATE
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0591
93rd percentile

Resolves: Bug 2081014 - 389-ds:1.4/389-ds-base: sending crafted message could result in DoS

Where it's fixed

ProductFixed inFixReleased
Linux
389-ds-base · Debian 12.15 (bookworm) 2.0.15-1.1 DEBIAN-CVE-2022-0918 Mar 16, 2022
389-ds-base · Debian 13.5 (trixie) 2.0.15-1.1 DEBIAN-CVE-2022-0918 Mar 16, 2022
389-ds-base · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
389-ds-base · RHEL 9 0:2.1.3-4.el9_1 RHSA-2022:8162 Nov 15, 2022
389-ds-base · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
389-ds-base · almalinux 9 2.1.3-4.el9_1 ALSA-2022:8162 Nov 15, 2022
389-ds-base · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
389-ds-base · ol 9 0:2.1.3-4.el9_1 ELSA-2022-8162 Nov 22, 2022
389-ds-base · rocky 8 0:1.4.3.28-7.module+el8.6.0+994+f0479f39 RLSA-2022:5823 Aug 2, 2022
389-ds-base · rocky 9 0:2.1.3-4.el9_1 RLSA-2022:8162 Nov 15, 2022
389-ds-base-devel · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
389-ds-base-devel · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
389-ds-base-devel · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
389-ds-base-legacy-tools · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
389-ds-base-legacy-tools · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
389-ds-base-legacy-tools · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
389-ds-base-libs · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
389-ds-base-libs · RHEL 9 0:2.1.3-4.el9_1 RHSA-2022:8162 Nov 15, 2022
389-ds-base-libs · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
389-ds-base-libs · almalinux 9 2.1.3-4.el9_1 ALSA-2022:8162 Nov 15, 2022
389-ds-base-libs · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
389-ds-base-libs · ol 9 0:2.1.3-4.el9_1 ELSA-2022-8162 Nov 22, 2022
389-ds-base-snmp · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
389-ds-base-snmp · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
389-ds-base-snmp · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
python3-lib389 · RHEL 8 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12 RHSA-2022:5823 Aug 2, 2022
python3-lib389 · RHEL 9 0:2.1.3-4.el9_1 RHSA-2022:8162 Nov 15, 2022
python3-lib389 · almalinux 8 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c ALSA-2022:5823 Aug 2, 2022
python3-lib389 · almalinux 9 2.1.3-4.el9_1 ALSA-2022:8162 Nov 15, 2022
python3-lib389 · ol 8 0:1.4.3.28-7.module+el8.6.0+20716+53f13155 ELSA-2022-5823 Aug 3, 2022
python3-lib389 · ol 9 0:2.1.3-4.el9_1 ELSA-2022-8162 Nov 22, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.