Every CVE Search/ Get API key

CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the...

6.5 MediumFix available

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

1.53%Up 0.6 points since Mar 24, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
CVE-2022-0996
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
CVE-2022-0996
Updated
2026-11-02
EUVDEUVD-2022-15989 No score

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
EUVD-2022-15989
Updated
2026-11-02
GitHub AdvisoriesGHSA-w87j-439w-p9f3 7.5

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the...

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
GHSA-w87j-439w-p9f3
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-287, CWE-613
Updated
2026-11-02
OSV 6.5

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
CVE-2022-0996
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2022-0996 6.5

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
DEBIAN-CVE-2022-0996
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
Show 18 moreShow less
OSVRHBA-2022:7929 5.7

Red Hat Bug Fix Advisory: redhat-ds:11 bug fix and enhancement update

Record
RHBA-2022:7929
CVSS 3.1
5.7 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2022:5239 7.5

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2022:5239
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5620 7.5

Red Hat Security Advisory: 389-ds:1.4 security update

Record
RHSA-2022:5620
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5823 7.5

Red Hat Security Advisory: 389-ds:1.4 security update

Record
RHSA-2022:5823
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8162 7.5

Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

Record
RHSA-2022:8162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8976 7.5

Red Hat Security Advisory: 389-ds-base security update

Record
RHSA-2022:8976
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:5823 7.5

Moderate: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:5823
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:8162 7.5

Moderate: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)

  • 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)

  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Record
RLSA-2022:8162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-0996 6.5

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

Record
UBUNTU-CVE-2022-0996
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2022:5823 No score

Moderate: 389-ds:1.4 security update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Record
ALSA-2022:5823
Updated
2026-11-02
OSVALSA-2022:8162 No score

Moderate: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

The following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)

Security Fix(es):

  • 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)
  • 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)
  • 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:8162
Updated
2026-11-02
OSVMGASA-2022-0134 No score

Updated 389-ds-base packages fix security vulnerability

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing. (CVE-2022-0918)

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication. (CVE-2022-0996)

Record
MGASA-2022-0134
Updated
2026-11-02
OSVopenSUSE-SU-2022:1100-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
  • Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)
  • Resolved multiple index migration bug (bsc#1194084)
Record
openSUSE-SU-2022:1100-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11952-1 No score

389-ds-2.0.14~git25.e6431d959-1.1 on GA media

These are all security issues fixed in the 389-ds-2.0.14~git25.e6431d959-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11952-1
Updated
2026-11-02
OSVSUSE-SU-2022:1100-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
  • Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)
  • Resolved multiple index migration bug (bsc#1194084)
Record
SUSE-SU-2022:1100-1
Updated
2026-11-02
OSVSUSE-SU-2022:1102-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
Record
SUSE-SU-2022:1102-1
Updated
2026-11-02
OSVSUSE-SU-2022:1139-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).
  • CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).
Record
SUSE-SU-2022:1139-1
Updated
2026-11-02
OSVSUSE-SU-2022:2163-1 No score

Security update for 389-ds

This update for 389-ds fixes the following issues:

  • CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).
  • CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).
  • CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).
  • CVE-2021-4091: Fixed double free in psearch (bsc#1195324).
  • CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455).
Record
SUSE-SU-2022:2163-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
389-ds-base
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-legacy-tools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-libs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base-snmp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
python3-lib389
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
1.4.3.28-7.module_el8.6.0+3071+d20b1d7c
389-ds-base
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
389-ds-base-libs
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
python3-lib389
AlmaLinux:9
From an advisory covering 3 CVEs
 before 2.1.3-4.el9_1
2.1.3-4.el9_1
389-ds-base
Debian:12
 before 2.0.15-1
2.0.15-1
Show 105 moreShow less
Affected packages
PackageAffectedFixed
389-ds-base
Debian:13
 before 2.0.15-1
2.0.15-1
389-ds-base
Debian:10
From an advisory covering 9 CVEs
 before 1.4.0.21-1+deb10u1, plus listed versions
1.4.0.21-1
1.4.0.21-1+deb10u1
389-ds-base
Debian:11
From an advisory covering 9 CVEs
 before 1.4.4.11-2+deb11u1, plus listed versions
1.4.4.11-2
1.4.4.11-2+deb11u1
389-ds-base
Mageia:8
From an advisory covering 2 CVEs
 before 1.4.0.26-8.4.mga8
1.4.0.26-8.4.mga8
389-ds-base
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-debuginfo
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-debugsource
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-devel
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-legacy-tools
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-legacy-tools-debuginfo
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-libs
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-libs-debuginfo
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-snmp
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base-snmp-debuginfo
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
cockpit-389-ds
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
python3-lib389
Red Hat:directory_server:11.6::el8
 before 0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33
389-ds-base
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base-snmp
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.3.10.2-16.el7_9
0:1.3.10.2-16.el7_9
389-ds-base
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-debugsource
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-devel
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-legacy-tools
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-legacy-tools-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-libs
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-snmp
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
python3-lib389
Red Hat:rhel_eus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1
389-ds-base
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-legacy-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-legacy-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-libs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-snmp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
python3-lib389
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
0:1.4.3.28-7.module+el8.6.0+15293+4900ec12
389-ds-base
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base-snmp-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
python3-lib389
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds-base
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-libs
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-libs-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base-snmp-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
python3-lib389
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:2.0.14-3.el9_0
0:2.0.14-3.el9_0
389-ds-base
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.3.28-7.module+el8.6.0+994+f0479f39
0:1.4.3.28-7.module+el8.6.0+994+f0479f39
389-ds-base
Rocky Linux:9
From an advisory covering 3 CVEs
 before 0:2.1.3-4.el9_1
0:2.1.3-4.el9_1
389-ds
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 2 CVEs
 before 1.4.4.19~git28.b12c72226-150300.3.12.1
1.4.4.19~git28.b12c72226-150300.3.12.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Real Time 15 SP2
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Proxy 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Manager Server 4.1
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Enterprise Storage 7
From an advisory covering 2 CVEs
 before 1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
1.4.3.29~git18.3fcd3b1bd-150200.3.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
 before 1.4.0.31~git13.e5e55afa0-150000.4.24.1
1.4.0.31~git13.e5e55afa0-150000.4.24.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 1.4.2.16~git68.efa843752-150100.7.34.1
1.4.2.16~git68.efa843752-150100.7.34.1
389-ds-base
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3
Show 4 moreShow less
1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1
 None known
389-ds-base
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1
 None known
389-ds-base
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2
 None known
389-ds-base
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1
 None known
389-ds-base
Ubuntu:25.10
 All versions, plus listed versions
3.1.2+dfsg1-1
 None known
389-ds-base
Ubuntu:26.10
 All versions, plus listed versions
3.1.2+vendor1-23.1.2+vendor1-2build13.3.1-3
 None known
389-ds-base
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.1.2+dfsg1-13.1.2+vendor1-2
 None known
389-ds
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
 before 1.4.4.19~git28.b12c72226-150300.3.12.1
1.4.4.19~git28.b12c72226-150300.3.12.1
389-ds
openSUSE:Tumbleweed
 before 2.0.14~git25.e6431d959-1.1
2.0.14~git25.e6431d959-1.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0996 is a medium vulnerability (CVSS 6.5) in Redhat 389 Directory Server, published March 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. Fixed in 389-ds-base 2.0.15-1.

References

Show 76 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open