Skip to content
OpenAdvisories
Medium ALAS2-2022-1879 1 CVE

Moderate: 389-ds-base security update (Amazon Linux 2)

Published Dec 1, 2022 · Updated Dec 6, 2022

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2850: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 389-ds-base 0:1.3.10.2-17.amzn2.0.1
Amazon Linux · 2 389-ds-base-debuginfo 0:1.3.10.2-17.amzn2.0.1
Amazon Linux · 2 389-ds-base-devel 0:1.3.10.2-17.amzn2.0.1
Amazon Linux · 2 389-ds-base-libs 0:1.3.10.2-17.amzn2.0.1
Amazon Linux · 2 389-ds-base-snmp 0:1.3.10.2-17.amzn2.0.1

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-2850.html