CVE-2022-0918
Published: 16 March 2022
Summary
CVE-2022-0918 is a high-severity an unspecified weakness vulnerability in Port389 389-Ds-Base. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 7.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
A vulnerability in the 389 Directory Server permits an unauthenticated remote attacker to trigger a denial of service against the slapd process. The flaw resides in the handling of a single LDAP-protocol message received over an unauthenticated TCP connection to the directory server's LDAP port; the message causes a segmentation fault that terminates the server process. The issue affects the core 389-ds-base package and carries a CVSS 3.1 score of 7.5 reflecting network attack vector, low complexity, and high availability impact with no confidentiality or integrity consequences.
An attacker with network reachability to the LDAP port can send one crafted message to crash the directory service without performing a bind or any other authentication step. Because the attack requires only a single packet and no credentials, it can be launched from any position on the network that can reach the service, resulting in immediate loss of directory availability until the process is restarted.
Vendor advisories from Red Hat and Debian reference the CVE and point to corresponding bug reports and source fixes in the 389-ds-base project. The Debian LTS announcement and Red Hat CVE pages indicate that updated packages addressing the crash are available through the respective distribution channels.
EPSS scores for the CVE have remained low, with a current value of 0.0767 and a recorded peak of 0.0990; no material upward trajectory after disclosure is evident in the supplied data.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-15945
Vulnerability details
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a…
more
TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.