6.5
Medium
CVE-2022-2850 A flaw was found In 389-ds-base
Description
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 389-ds-base | Versions not published |
Other CVEs of 389-ds-base
The 8 CVEs of 389-ds-base →
CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base
Not rated
CVE-2021-3652
A flaw was found in 389-ds-base
Not rated
CVE-2022-0996
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause…
Not rated
CVE-2022-0918
A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access…
Not rated