Every CVE Search/ Get API key

CVE-2022-0918

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated...

7.5 HighPublic exploitFix available

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

5.91%Up 5.0 points since Mar 17, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
CVE-2022-0918
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
CVE-2022-0918
Updated
2026-11-02
EUVDEUVD-2022-15945 No score

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
EUVD-2022-15945
Updated
2026-11-02
GitHub AdvisoriesGHSA-2h5q-vphx-mcwx 7.5

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated...

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
GHSA-2h5q-vphx-mcwx
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-0918 7.5

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
DEBIAN-CVE-2022-0918
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVRHSA-2022:2210 7.5

Red Hat Security Advisory: redhat-ds:11 security and bug fix update

Record
RHSA-2022:2210
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVRHSA-2022:5239 7.5

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2022:5239
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5620 7.5

Red Hat Security Advisory: 389-ds:1.4 security update

Record
RHSA-2022:5620
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5823 7.5

Red Hat Security Advisory: 389-ds:1.4 security update

Record
RHSA-2022:5823
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8162 7.5

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2022:8162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8976 7.5

Red Hat Security Advisory: 389-ds-base security update

Record
RHSA-2022:8976
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:5823 7.5

Moderate: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:5823
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:8162 7.5

Moderate: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

  • 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Record
RLSA-2022:8162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-0918 7.5

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
UBUNTU-CVE-2022-0918
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:5823 No score

Moderate: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:5823
Updated
2026-11-02
OSVALSA-2022:8162 No score

Moderate: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
  • 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)
  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:8162
Updated
2026-11-02
OSV No score

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.

Record
CVE-2022-0918
Updated
2026-11-02
OSVMGASA-2022-0134 No score

Updated 389-ds-base packages fix security vulnerability

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing. (CVE-2022-0918)

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication. (CVE-2022-0996)

Record
MGASA-2022-0134
Updated
2026-11-02
OSVopenSUSE-SU-2022:1100-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
  • Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)
  • Resolved multiple index migration bug (bsc#1194084)
Record
openSUSE-SU-2022:1100-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11963-1 No score

389-ds-2.1.1~git4.b7f891097-1.1 on GA media

These are all security issues fixed in the 389-ds-2.1.1~git4.b7f891097-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11963-1
Updated
2026-11-02
OSVSUSE-SU-2022:1100-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
  • Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)
  • Resolved multiple index migration bug (bsc#1194084)
Record
SUSE-SU-2022:1100-1
Updated
2026-11-02
OSVSUSE-SU-2022:1102-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
Record
SUSE-SU-2022:1102-1
Updated
2026-11-02
OSVSUSE-SU-2022:1139-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
Record
SUSE-SU-2022:1139-1
Updated
2026-11-02
OSVSUSE-SU-2022:2163-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
  • CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
Record
SUSE-SU-2022:2163-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-legacy-tools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-snmp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
python3-lib389
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
389-ds-base-libs
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
python3-lib389
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
389-ds-base
Debian:12
 before 2.0.15-1.1
2.0.15-1.1
Show 105 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base
Debian:13
 before 2.0.15-1.1
2.0.15-1.1
389-ds-base
Debian:10
From an advisory covering 9 CVEs
 before 1.4.0.21-1+deb10u1, plus listed versions
1.4.0.21-1
1.4.0.21-1+deb10u1
389-ds-base
Debian:11
From an advisory covering 9 CVEs
 before 1.4.4.11-2+deb11u1, plus listed versions
1.4.4.11-2
1.4.4.11-2+deb11u1
389-ds-base
Mageia:8
From an advisory covering 2 CVEs
 before 1.4.0.26-8.4.mga8
1.4.0.26-8.4.mga8
389-ds-base
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-debuginfo
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-debugsource
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-devel
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-legacy-tools
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-libs
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-libs-debuginfo
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-snmp
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base-snmp-debuginfo
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
cockpit-389-ds
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
python3-lib389
Red Hat:directory_server:11.5::el8
 before 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf
389-ds-base
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-legacy-tools
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-legacy-tools-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-libs
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-snmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
python3-lib389
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-legacy-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-legacy-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
python3-lib389
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
python3-lib389
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-libs
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
python3-lib389
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+994+f0479f39
0:1.4.3.28-7.module+el8.6.0+994+f0479f39
389-ds-base
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 1.4.4.19~git28.b12c72226-150300.3.12.1
1.4.4.19~git28.b12c72226-150300.3.12.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Real Time 15 SP2
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds-base
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3
Show 4 moreShow less
1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1
 None known
389-ds-base
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2
 None known
389-ds-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1
 None known
389-ds-base
Ubuntu:25.10
 All versions, plus listed versions
3.1.2+dfsg1-1
 None known
389-ds-base
Ubuntu:26.10
 All versions, plus listed versions
3.1.2+vendor1-23.1.2+vendor1-2build13.3.1-3
 None known
389-ds-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.1.2+dfsg1-13.1.2+vendor1-2
 None known
389-ds
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 1.4.4.19~git28.b12c72226-150300.3.12.1
1.4.4.19~git28.b12c72226-150300.3.12.1
389-ds
openSUSE:Tumbleweed
 before 2.1.1~git4.b7f891097-1.1
2.1.1~git4.b7f891097-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubNathanMulbrook/CVE-2022-09182022-05-10

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0918 is a high vulnerability (CVSS 7.5) in Port389 389-ds-base, published March 16, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.91%, the 93rd percentile. Fixed in 389-ds-base 2.0.15-1.1.

References

Show 68 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open