Red Hat Security Advisory

RHSA-2022:8162

389-ds-base security, bug fix, and enhancement update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) 389-ds-base-2.1.3-4.el9_1, 389-ds-base-libs-2.1.3-4.el9_1, python3-lib389-2.1.3-4.el9_1

Fixes 3 records

TI-2022-02643 CVE-2022-2850 · GHSA-6c63-4574-7p9f

NULL pointer dereference in 389-ds-base

MEDIUM 62

A flaw was found In 389-ds-base.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0158 Published 2022-10-14 Partial fix CWE-476

TI-2022-00821 CVE-2022-0918 · GHSA-2h5q-vphx-mcwx

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated…

MEDIUM 42

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05914 Published 2022-03-16 Partial fix

TI-2022-00895 CVE-2022-0996 · GHSA-w87j-439w-p9f3

Improper authentication in 389-ds-base

LOW 32

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01531 Published 2022-03-23 Partial fix CWE-287