Back to search
CVE-2022-2850
Published: Oct 14, 2022
Modified: Nov 3, 2025
PUBLISHED
Description
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. This CVE is assigned against an incomplete fix of CVE-2021-3514.
| Vendor | Product | Versions |
|---|---|---|
n/a | 389-ds-base | affected 389-ds-base-2.0.x+ |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now