CVE-2022-0918

EIP tracks 1 public exploit for CVE-2022-0918. PoCs published by NathanMulbrook.

AI-analyzed exploit summary This PoC exploits CVE-2022-0918, a DoS vulnerability in 389 Directory Server (slapd) by sending a malformed LDAP packet to trigger a segmentation fault. The code constructs a crafted packet and sends it to the target server on port 389.

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.