vulnerability
SUSE: CVE-2022-0918: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:N/A:P) | Mar 16, 2022 | Oct 26, 2022 | Apr 26, 2023 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Mar 16, 2022
Added
Oct 26, 2022
Modified
Apr 26, 2023
Description
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Solutions
suse-upgrade-389-dssuse-upgrade-389-ds-develsuse-upgrade-389-ds-snmpsuse-upgrade-lib389suse-upgrade-libsvrcore0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.