CVE:CVE-2022-2850
CNNVD:CNNVD-202209-221
389-ds-base是一个高度可用、功能齐全、可靠且安全的 LDAP 服务器实现。它处理世界上许多最大的 LDAP 部署。
389-ds-base 存在代码问题漏洞。攻击者利用该漏洞可以通过 Malformed Cookie 导致 389-ds 的致命错误，以触发拒绝服务。
solution:Upgrade redhat directory_server to a higher version than 11.0,12.0,and avoid the version 11.0,12.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,8.0,9.0,and avoid the version 6.0,7.0,8.0,9.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36; Upgrade port389 389-ds-base to a higher version than 2.4.1,and avoid the version [2.0.0,2.4.1]; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0