{"id":"CVE-2022-2850","aliases":["ALSA-2022:7133","ALSA-2022:8162","DEBIAN-CVE-2022-2850","DLA-3399-1","DLA-4021-1","EUVD-2022-35084","GHSA-6c63-4574-7p9f","MGASA-2022-0413","RHSA-2022:7087","RHSA-2022:7133","RHSA-2022:8162","RHSA-2022:8680","RHSA-2022:8886","RHSA-2022:8976","RHSA-2023:0479","RLSA-2022:7133","RLSA-2022:8162","SUSE-SU-2022:3029-1","SUSE-SU-2022:3286-1","UBUNTU-CVE-2022-2850"],"status":"published","title":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an...","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0158,"percentile":0.75692,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-09-05T14:41:44Z","modified":"2026-11-03T08:03:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"389-ds-base","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-lib389","fixed_in":["1.4.3.28-8.module_el8.6.0+3338+ebccfef1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"389-ds-base","fixed_in":["2.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"389-ds-base","fixed_in":["2.3.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"389-ds-base","fixed_in":["1.4.0.26-8.6.mga8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","fixed_in":["0:1.3.10.2-17.el7_9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-devel","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"python3-lib389","fixed_in":["0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-debuginfo","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-debugsource","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-devel","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-legacy-tools","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-legacy-tools-debuginfo","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-libs","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-libs-debuginfo","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-snmp","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"cockpit-389-ds","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:11.5::el8","package":"python3-lib389","fixed_in":["0:1.4.3.29-7.module+el8dsrv+17334+74991258"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-debuginfo","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-debugsource","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-devel","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-libs","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-libs-debuginfo","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-snmp","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-snmp-debuginfo","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"cockpit-389-ds","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Red Hat:directory_server:12::el9","package":"python3-lib389","fixed_in":["0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"389-ds-base","fixed_in":["0:1.4.3.28-8.module+el8.6.0+1048+263f2d23"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","fixed_in":["1.4.4.19~git46.c900a28c8-150300.3.22.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"389-ds","fixed_in":["1.4.4.19~git46.c900a28c8-150300.3.22.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"389-ds","fixed_in":["2.0.16~git20.219f047ae-150400.3.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"389-ds","fixed_in":["2.0.16~git20.219f047ae-150400.3.10.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3.28-8.module_el8.6.0+3338+ebccfef1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.21-1+deb10u1"}]}],"versions":["1.4.0.21-1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.11-2+deb11u1"}]}],"versions":["1.4.4.11-2"],"bundled":9},{"source":"osv","ecosystem":"Mageia:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0.26-8.6.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10.2-17.el7_9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+16880+945f9b53"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.16-24.module+el8.4.0+17207+46c15e64"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-legacy-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-legacy-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:11.5::el8","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.29-7.module+el8dsrv+17334+74991258"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el9_0"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"389-ds-base-snmp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"cockpit-389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Red Hat:directory_server:12::el9","package":"python3-lib389","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.18-3.module+el9dsrv+17947+6e05a0b8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3.28-8.module+el8.6.0+1048+263f2d23"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-4.el9_1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git46.c900a28c8-150300.3.22.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4.19~git46.c900a28c8-150300.3.22.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.16~git20.219f047ae-150400.3.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"389-ds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.16~git20.219f047ae-150400.3.10.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.3.12-1build1","1.3.3.13-1","1.3.4.5-2","1.3.4.8-1","1.3.4.8-3","1.3.4.8-3ubuntu1","1.3.4.8-4","1.3.4.9-1","1.3.4.9-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.7.5-1","1.3.7.5-1build1","1.3.7.5-1build2","1.3.7.9-1","1.3.7.10-1","1.3.7.10-1ubuntu1","1.3.7.10-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.1.6-4","1.4.1.6-4build1","1.4.2.4-1","1.4.2.4-1build1","1.4.3.2-1","1.4.3.2-1build1","1.4.3.6-2","1.4.3.6-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.4.11-2build1","1.4.4.11-2build2","1.4.4.17-1","2.0.11-2","2.0.14-1","2.0.15-1","2.0.15-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.4+dfsg1-1","2.4.4+dfsg1-1ubuntu1","2.4.4+dfsg1-1ubuntu4","2.4.4+dfsg1-3","2.4.5+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+vendor1-2","3.1.2+vendor1-2build1","3.3.1-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"389-ds-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.2+dfsg1-1","3.1.2+vendor1-2"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"port389","product":"389-ds-base"},{"vendor":"redhat","product":"directory_server"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118691","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2850","tags":["x_transferred","Exploit","Vendor Advisory","report","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00015.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2850","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7087","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7133","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8162","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8680","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8886","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8976","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0479","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6c63-4574-7p9f"},{"url":"https://bugzilla.redhat.com/2118691","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7133.html","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0918","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0996","tags":["report"]},{"url":"https://bugzilla.redhat.com/2055815","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064769","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8162.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2850","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0413.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31022","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2113056","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7087.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2850","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7133.json","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115348","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8162.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0918","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0996","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0996","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8680.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2098140","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8886.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8976.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0479.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7133","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8162","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223029-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199908","tags":["report"]},{"url":"https://bugzilla.suse.com/1202470","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2850","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223286-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2850","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/issues/4711#issuecomment-1205100979","tags":["report"]},{"url":"https://github.com/389ds/389-ds-base/issues/5418","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-2850","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T00:00:00Z","modified":"2025-11-03T20:34:50.179Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-35084","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T00:00:00Z","modified":"2025-11-03T20:34:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-6c63-4574-7p9f","title":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an...","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T19:00:16Z","modified":"2025-11-03T21:31:46Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:04:19.274788Z"}],"nvd":[{"id":"CVE-2022-2850","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T18:15:14.98Z","modified":"2026-06-17T04:42:42.07Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:29.52424Z"}],"osv":[{"id":"CVE-2022-2850","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T18:15:14.98Z","modified":"2026-04-16T04:39:16.29881153Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DEBIAN-CVE-2022-2850","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T18:15:14.98Z","modified":"2026-11-03T08:03:51.273163881Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"RHSA-2022:7087","title":"Red Hat Security Advisory: 389-ds-base security and bug fix update","status":"published","published":"2024-09-16T08:30:54Z","modified":"2026-06-26T12:22:29.600743119Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7133","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-09-16T08:31:03Z","modified":"2025-11-22T12:39:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8162","title":"Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:31:10Z","modified":"2026-06-27T10:16:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8680","title":"Red Hat Security Advisory: 389-ds:1.4 security update","status":"published","published":"2024-09-16T08:31:19Z","modified":"2025-11-22T12:42:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8886","title":"Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T08:31:28Z","modified":"2025-11-22T12:42:28Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8976","title":"Red Hat Security Advisory: 389-ds-base security update","status":"published","published":"2024-09-16T08:31:36Z","modified":"2026-06-27T10:16:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:0479","title":"Red Hat Security Advisory: redhat-ds:12 security update","status":"published","published":"2024-09-24T13:35:37Z","modified":"2025-11-22T12:44:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RLSA-2022:7133","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T07:33:40Z","modified":"2026-02-04T17:45:05.37133Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8162","title":"Moderate: 389-ds-base security, bug fix, and enhancement update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nThe following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)\n\nSecurity Fix(es):\n\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:17:19Z","modified":"2026-02-04T16:45:08.985061Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-2850","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.","status":"published","published":"2022-10-14T18:15:00Z","modified":"2026-10-17T12:56:21.666471052Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2022:7133","title":"Moderate: 389-ds:1.4 security update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration. \n\nSecurity Fix(es):\n\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-25T00:00:00Z","modified":"2026-10-29T11:00:57.302717145Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8162","title":"Moderate: 389-ds-base security, bug fix, and enhancement update","description":"389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.\n\nThe following packages have been upgraded to a later upstream version: 389-ds-base (2.1.3). (BZ#2061801)\n\nSecurity Fix(es):\n\n* 389-ds-base: sending crafted message could result in DoS (CVE-2022-0918)\n* 389-ds-base: SIGSEGV in sync_repl (CVE-2022-2850)\n* 389-ds-base: expired password was still allowed to access the database (CVE-2022-0996)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:17.94736141Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DLA-3399-1","title":"389-ds-base - security update","status":"published","published":"2023-04-24T00:00:00Z","modified":"2026-03-09T01:20:05.255613Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-4021-1","title":"389-ds-base - security update","status":"published","published":"2025-01-19T00:00:00Z","modified":"2026-03-09T01:19:06.435503Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0413","title":"Updated 389-ds-base packages fix security vulnerability","description":"A flaw was found In 389-ds-base. When the Content Synchronization plugin\nis enabled, an authenticated user can reach a NULL pointer dereference\nusing a specially crafted query. This flaw allows an authenticated \nttacker to cause a denial of service. This CVE is assigned against an\nincomplete fix of CVE-2021-3514. (CVE-2022-2850)\n","status":"published","published":"2022-11-08T19:44:28Z","modified":"2026-04-16T04:42:45.249963372Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"SUSE-SU-2022:3029-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470).\n\nNon-security fixes:\n\n- Update to version 1.4.4.19~git46.c900a28c8:\n  * CI - makes replication/acceptance_test.py::test_modify_entry more robust\n  * UI - LDAP Editor is not updated when we switch instances\n- Improvements to openldap import with password policy present (bsc#1199908)\n- Update to version 1.4.4.19~git43.8ba2ea21f:\n  * fix covscan\n  * BUG - pid file handling\n  * Memory leak in slapi_ldap_get_lderrno\n  * Need a compatibility option about sub suffix handling\n  * Release tarballs don't contain cockpit webapp\n  * Replication broken after password change\n  * Harden ReplicationManager.wait_for_replication\n  * dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'\n  * CLI - dsconf backend export breaks with multiple backends\n  * CLI - improve task handling\n","status":"published","published":"2022-09-05T14:41:44Z","modified":"2026-02-04T02:34:03.814324Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3286-1","title":"Security update for 389-ds","description":"This update for 389-ds fixes the following issues:\n\n- CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470).\n\nNon-security fixes:\n\n- Update to version 2.0.16~git20.219f047ae:\n  * Fix missing 'not' in description\n  * CI - makes replication/acceptance_test.py::test_modify_entry more robust\n  * fix repl keep alive event interval\n  * Sync_repl may crash while managing invalid cookie\n  * Hostname when set to localhost causing failures in other tests\n  * lib389 - do not set backend name to lowercase\n  * keep alive update event starts too soon\n  * Fix various memory leaks\n  * UI - LDAP Editor is not updated when we switch instances\n  * Supplier should do periodic updates\n- Update sudoers schema to support UTF-8 (bsc#1197998)\n- Update to version 2.0.16~git9.e2a858a86:\n  * UI - Various fixes and RFE's for UI\n  * Remove problematic language from source code\n  * CI - disable TLS hostname checking\n  * Update npm and cargo packages\n  * Support ECDSA private keys for TLS\n","status":"published","published":"2022-09-16T07:08:59Z","modified":"2026-02-04T02:36:11.825682Z","updated_at":"2026-11-02T15:53:51.440565Z"}]}}