Published: 14/10/2022 Updated: 18/05/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated malicious user to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux 8.0
redhat directory server 11.0
redhat enterprise linux 9.0
redhat directory server 12.0
fedoraproject fedora 35
fedoraproject fedora 36
port389 389-ds-base
debian debian linux 10.0

Debian Bug report logs - #1018054 389-ds-base: CVE-2022-2850: Sync_repl may crash while managing invalid cookie Package: src:389-ds-base; Maintainer for src:389-ds-base is Debian FreeIPA Team <pkg-freeipa-devel@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 24 Aug 2022 19:42 ...

Synopsis Moderate: 389-ds:14 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the 389-ds:14 module is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat Product Se ...

Synopsis Moderate: 389-ds-base security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security ha ...

Synopsis Moderate: 389-ds:14 security update Type/Severity Security Advisory: Moderate Topic An update for the 389-ds:14 module is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detaile ...

Synopsis Moderate: redhat-ds:12 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the redhat-ds:12 module is now available for Red Hat Directory Server 120 for RHEL 9Red Hat Product Security h ...

Synopsis Moderate: 389-ds-base security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 9Red Hat Product Security ha ...

Synopsis Moderate: 389-ds-base security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for 389-ds-base is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this u ...

Synopsis Moderate: redhat-ds:11 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the redhat-ds:11 module is now available for Red Hat Directory Server 115 for RHEL 8 ...

A flaw was found In 389-ds-base When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query This flaw allows an authenticated attacker to cause a denial of service (CVE-2022-2850) ...

CWE-476 https://bugzilla.redhat.com/show_bug.cgi?id=2118691 https://access.redhat.com/security/cve/CVE-2022-2850 https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018054 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2022-1879.html

Get Started

CVE-2022-2850

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect