Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sfpm-3ead-t7ds
SummaryA vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The message triggers a segmentation fault that results in slapd crashing.
Aliases
0
alias CVE-2022-0918
Fixed_packages
0
url pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
purl pkg:deb/debian/389-ds-base@1.4.4.11-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
5
vulnerability VCID-vadc-mdbp-q3g9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%3Fdistro=trixie
1
url pkg:deb/debian/389-ds-base@1.4.4.11-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/389-ds-base@1.4.4.11-2%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@1.4.4.11-2%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/389-ds-base@2.0.15-1.1?distro=trixie
purl pkg:deb/debian/389-ds-base@2.0.15-1.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.0.15-1.1%3Fdistro=trixie
3
url pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/389-ds-base@2.3.1%2Bdfsg1-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5mdk-bqm7-mkeu
1
vulnerability VCID-7dna-4mcn-jqd5
2
vulnerability VCID-ft29-jr9j-jbbm
3
vulnerability VCID-k27f-tsq5-73fn
4
vulnerability VCID-ud9m-jz3k-bfhm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@2.3.1%252Bdfsg1-1%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bdfsg1-1%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bdfsg1-1%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
purl pkg:deb/debian/389-ds-base@3.1.2%2Bvendor1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/389-ds-base@3.1.2%252Bvendor1-2%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/389-ds-base@1.3.10.2-16?arch=el7_9
purl pkg:rpm/redhat/389-ds-base@1.3.10.2-16?arch=el7_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfpm-3ead-t7ds
1
vulnerability VCID-uz8q-6ydj-x3cu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@1.3.10.2-16%3Farch=el7_9
1
url pkg:rpm/redhat/389-ds-base@2.0.14-3?arch=el9_0
purl pkg:rpm/redhat/389-ds-base@2.0.14-3?arch=el9_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfpm-3ead-t7ds
1
vulnerability VCID-uz8q-6ydj-x3cu
2
vulnerability VCID-xv3p-gza9-4bcg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@2.0.14-3%3Farch=el9_0
2
url pkg:rpm/redhat/389-ds-base@2.1.3-4?arch=el9_1
purl pkg:rpm/redhat/389-ds-base@2.1.3-4?arch=el9_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sfpm-3ead-t7ds
1
vulnerability VCID-uz8q-6ydj-x3cu
2
vulnerability VCID-xv3p-gza9-4bcg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/389-ds-base@2.1.3-4%3Farch=el9_1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0918.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-0918.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0918
reference_id
reference_type
scores
0
value 0.07668
scoring_system epss
scoring_elements 0.92042
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0918
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0918
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0918
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016445
reference_id 1016445
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016445
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2055815
reference_id 2055815
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2055815
6
reference_url https://access.redhat.com/errata/RHSA-2022:2210
reference_id RHSA-2022:2210
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:2210
7
reference_url https://access.redhat.com/errata/RHSA-2022:5239
reference_id RHSA-2022:5239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5239
8
reference_url https://access.redhat.com/errata/RHSA-2022:5620
reference_id RHSA-2022:5620
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5620
9
reference_url https://access.redhat.com/errata/RHSA-2022:5823
reference_id RHSA-2022:5823
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:5823
10
reference_url https://access.redhat.com/errata/RHSA-2022:8162
reference_id RHSA-2022:8162
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8162
11
reference_url https://access.redhat.com/errata/RHSA-2022:8976
reference_id RHSA-2022:8976
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:8976
Weaknesses
0
cwe_id 400
name Uncontrolled Resource Consumption
description The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
1
cwe_id 770
name Allocation of Resources Without Limits or Throttling
description The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
Exploits
Severity_range_score7.5 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sfpm-3ead-t7ds