ID:8265 - Exploit for Buffer overflow in 389-ds-base - CVE-2022-0918

 
Main Vulnerability Database Exploits ID:8265 - Exploit for Buffer overflow in 389-ds-base - CVE-2022-0918

ID:8265 - Exploit for Buffer overflow in 389-ds-base - CVE-2022-0918

Published: August 18, 2022


Vulnerability identifier: #VU63128
Vulnerability risk: Medium
CVE-ID: CVE-2022-0918
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
389-ds-base

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when handling network packets. A remote attacker can create a single TCP packet to the LDAP port, trigger a segmentation fault and crash the slapd daemon.


Remediation

Install updates from vendor's website.