CVE-2022-0918 Denial of service in 389-ds-base
An unauthenticated attacker can crash the 389 Directory Server by sending a single malicious message, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0918?
CVE-2022-0918 is a high-severity denial of service vulnerability in Redhat Enterprise Linux, published on 16 Mar 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Which versions are affected by CVE-2022-0918?
It affects 2 products.
Linux distribution packages (13)
389-ds-base Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-debuginfo Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-debugsource Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-devel Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-legacy-tools Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-legacy-tools-debuginfo Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-libs Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-libs-debuginfo Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-snmp Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds-base-snmp-debuginfo Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
cockpit-389-ds Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
python3-lib389 Red Hat:directory_server:11.5::el8 | All versions | 0:1.4.3.29-3.module+el8dsrv+14615+a86efbbf |
389-ds openSUSE:Tumbleweed | All versions | 2.1.1~git4.b7f891097-1.1 |
Products include Port389 389-Ds-Base, Redhat Enterprise Linux.
How do I fix CVE-2022-0918?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-0918 being exploited?
There is no known exploitation of CVE-2022-0918 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as DEBIAN-CVE-2022-0918, GHSA-2h5q-vphx-mcwx, RHSA-2022:2210, UBUNTU-CVE-2022-0918, openSUSE-SU-2024:11963-1.