{"id":"CVE-2022-0996","aliases":["ALSA-2022:5823","ALSA-2022:8162","DEBIAN-CVE-2022-0996","DLA-3399-1","DLA-4021-1","EUVD-2022-15989","GHSA-w87j-439w-p9f3","MGASA-2022-0134","RHBA-2022:7929","RHSA-2022:5239","RHSA-2022:5620","RHSA-2022:5823","RHSA-2022:8162","RHSA-2022:8976","RLSA-2022:5823","RLSA-2022:8162","SUSE-SU-2022:1100-1","SUSE-SU-2022:1102-1","SUSE-SU-2022:1139-1","SUSE-SU-2022:2163-1","UBUNTU-CVE-2022-0996","openSUSE-SU-2022:1100-1","openSUSE-SU-2024:11952-1"],"status":"published","title":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the...","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01531,"percentile":0.74944,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287","CWE-613"],"published":"2022-03-23T19:46:16Z","modified":"2026-11-03T08:01:56Z","fixes":[{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["2.0.15-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["2.0.15-1"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-devel","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-libs","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"cockpit-389-ds","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.6::el8","package":"python3-lib389","fixed_in":["0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"389-ds","fixed_in":["2.0.14~git25.e6431d959-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-7.module_el8.6.0+3071+d20b1d7c"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.21-1+deb10u1"}]}],"versions":["1.4.0.21-1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2+deb11u1"}]}],"versions":["1.4.4.11-2"],"bundled":9},{"source":"osv","ecosystem":"Mageia:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.26-8.4.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.6::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.31-6.module+el8dsrv+16980+c4b9cd33"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-16.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-21.module+el8.4.0+15657+e1585ac1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+15293+4900ec12"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-7.module+el8.6.0+994+f0479f39"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git28.b12c72226-150300.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.29~git18.3fcd3b1bd-150200.3.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git13.e5e55afa0-150000.4.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git13.e5e55afa0-150000.4.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git13.e5e55afa0-150000.4.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.31~git13.e5e55afa0-150000.4.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.2.16~git68.efa843752-150100.7.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1","1.3.4.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1","1.3.7.10-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2","1.4.3.6-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.4.11-2build1","1.4.4.11-2build2","1.4.4.17-1","2.0.11-2","2.0.14-1","2.0.15-1","2.0.15-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4+dfsg1-1","2.4.4+dfsg1-1ubuntu1","2.4.4+dfsg1-1ubuntu4","2.4.4+dfsg1-3","2.4.5+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+vendor1-2","3.1.2+vendor1-2build1","3.3.1-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1","3.1.2+vendor1-2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git28.b12c72226-150300.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14~git25.e6431d959-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"389_directory_server"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064769","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/ByteHackr/389-ds-base","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QFD7CBBX3IZOSHEWL2EYKRLOEQSXCZ6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0996","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5239","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5620","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5823","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8162","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8976","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0996","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QFD7CBBX3IZOSHEWL2EYKRLOEQSXCZ6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4QFD7CBBX3IZOSHEWL2EYKRLOEQSXCZ6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F"},{"url":"https://github.com/advisories/GHSA-w87j-439w-p9f3"},{"url":"https://access.redhat.com/security/cve/CVE-2022-0918","tags":["report"]},{"url":"https://bugzilla.redhat.com/2055815","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064769","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-5823.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2850","tags":["report"]},{"url":"https://bugzilla.redhat.com/2118691","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8162.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0996","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0134.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30235","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PYT2IQJFHQWZENJJRY6EJB3XIFZGNT7F/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WUT5CGHERM6PDXKCM7Z3IJLGIYJ6V6AO/","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2022:7929","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117025","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_7929.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0996","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2014768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055815","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5239.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0918","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5620.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5823.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118691","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8162.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2850","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2850","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8976.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5823","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8162","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221100-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194068","tags":["report"]},{"url":"https://bugzilla.suse.com/1194084","tags":["report"]},{"url":"https://bugzilla.suse.com/1197275","tags":["report"]},{"url":"https://bugzilla.suse.com/1197345","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0996","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221102-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221139-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188455","tags":["report"]},{"url":"https://bugzilla.suse.com/1195324","tags":["report"]},{"url":"https://bugzilla.suse.com/1199889","tags":["report"]},{"url":"https://bugzilla.suse.com/1200175","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1949","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-0996","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0996","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T19:46:16Z","modified":"2025-11-03T20:34:34.393Z","updated_at":"2026-11-02T14:34:42.028422Z"}],"euvd":[{"id":"EUVD-2022-15989","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T19:46:16Z","modified":"2025-11-03T20:34:34Z","updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-w87j-439w-p9f3","title":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the...","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-24T00:00:16Z","modified":"2025-11-03T21:31:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-287","CWE-613"],"updated_at":"2026-11-02T15:04:19.274788Z"}],"nvd":[{"id":"CVE-2022-0996","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T20:15:10.713Z","modified":"2026-06-17T04:21:36.993Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"CVE-2022-0996","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T20:15:10.713Z","modified":"2026-04-16T04:32:35.585757992Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-0996","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T20:15:10.713Z","modified":"2026-11-03T08:01:56.783225897Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"RHBA-2022:7929","title":"Red Hat Bug Fix Advisory: redhat-ds:11 bug fix and enhancement update","status":"published","published":"2026-04-06T10:01:06Z","modified":"2026-04-07T10:01:30Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2022:5239","title":"Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:09:50Z","modified":"2026-06-27T10:15:27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5620","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-09-16T08:09:58Z","modified":"2026-06-27T10:15:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5823","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-09-16T08:10:05Z","modified":"2026-06-27T10:15:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:8162","title":"Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:31:10Z","modified":"2026-06-27T10:16:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8976","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-09-16T08:31:36Z","modified":"2026-06-27T10:16:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:5823","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-02T07:05:16Z","modified":"2026-02-05T08:15:13.642623Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8162","title":"Moderate: 389-ds-base security, bug fix, and enhancement update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nThe following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)\n\nSecurity Fix(es):\n\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:17:19Z","modified":"2026-02-04T16:45:08.985061Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-0996","description":"A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.","status":"published","published":"2022-03-23T20:15:00Z","modified":"2026-10-17T12:55:56.050575519Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:5823","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \nSecurity Fix(es):\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-08-02T00:00:00Z","modified":"2026-10-29T11:01:48.240601459Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8162","title":"Moderate: 389-ds-base security, bug fix, and enhancement update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nThe following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)\n\nSecurity Fix(es):\n\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:17.94736141Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3399-1","title":"389-ds-base - security update","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-03-09T01:20:05.255613Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4021-1","title":"389-ds-base - security update","status":"published","published":"2025-01-19T00:00:00Z","modified":"2026-03-09T01:19:06.435503Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0134","title":"Updated 389-ds-base packages fix security vulnerability","description":"A vulnerability was discovered in the 389 Directory Server that allows an\nunauthenticated attacker with network access to the LDAP port to cause a\ndenial of service. The denial of service is triggered by a single message\nsent over a TCP connection, no bind or other authentication is required.\nThe message triggers a segmentation fault that results in slapd crashing.\n(CVE-2022-0918)\n\nA vulnerability was found in the 389 Directory Server that allows expired\npasswords to access the database to cause improper authentication.\n(CVE-2022-0996)\n","status":"published","published":"2022-04-09T21:20:39Z","modified":"2026-04-16T04:44:04.467271033Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:1100-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).\n- CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).\n- Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)\n- Resolved multiple index migration bug (bsc#1194084)\n","status":"published","published":"2022-04-04T11:00:19Z","modified":"2026-02-04T04:40:26.109555Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11952-1","title":"389-ds-2.0.14~git25.e6431d959-1.1 on GA media","description":"These are all security issues fixed in the 389-ds-2.0.14~git25.e6431d959-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:27.694403Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1100-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).\n- CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).\n- Resolved LDAP-Support not working with DHCP by adding required schema (bsc#1194068)\n- Resolved multiple index migration bug (bsc#1194084)\n","status":"published","published":"2022-04-04T11:00:18Z","modified":"2026-02-04T04:40:34.951503Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1102-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).\n- CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).\n","status":"published","published":"2022-04-04T15:01:01Z","modified":"2026-02-04T03:21:38.023528Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1139-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-0918: Fixed a potential denial of service via crafted packet (bsc#1197275).\n- CVE-2022-0996: Fixed a mishandling of password expiry (bsc#1197345).\n","status":"published","published":"2022-04-08T14:29:06Z","modified":"2026-02-04T03:21:09.621699Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2163-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-1949: Fixed full access control bypass with simple crafted query (bsc#1199889).\n- CVE-2022-0918: Fixed denial of service issue via crafted messages (bsc#1197275).\n- CVE-2022-0996: Fixed mishandling of password expiry (bsc#1197345).\n- CVE-2021-4091: Fixed double free in psearch (bsc#1195324).\n- CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords (bsc#1188455). \n","status":"published","published":"2022-06-23T12:34:06Z","modified":"2026-02-04T03:18:11.555587Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}