A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade softhsm-develUpgrade python3-pyusbUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade custodiaUpgrade softhsmUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade opendnssec | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nisUpgrade slapi-nis-debuginfo | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade slapi-nis-debugsourceUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade softhsm-debuginfoUpgrade slapi-nis-debuginfoUpgrade python3-ipaserverUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-serverUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-commonUpgrade ipa-healthcheckUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade ipa-debugsourceUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade ipa-debuginfoUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade softhsmUpgrade python3-yubicoUpgrade custodiaUpgrade python3-qrcode-coreUpgrade ipa-server-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade opendnssecUpgrade softhsm-develUpgrade slapi-nis | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade ipa-server-commonUpgrade python3-ipaclientUpgrade python3-qrcodeUpgrade softhsmUpgrade bind-dyndb-ldapUpgrade ipa-client-epnUpgrade ipa-server-dnsUpgrade python3-pyusbUpgrade ipa-python-compatUpgrade ipa-healthcheck-coreUpgrade opendnssecUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade ipa-commonUpgrade custodiaUpgrade ipa-serverUpgrade ipa-clientUpgrade slapi-nisUpgrade python3-ipaserverUpgrade ipa-selinuxUpgrade python3-ipatestsUpgrade ipa-client-sambaUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade python3-ipalib | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade slapi-nisUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheck-coreUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-kdcproxyNo solution existsUpgrade slapi-nis-debugsourceUpgrade ipa-client-epnUpgrade ipa-selinuxUpgrade ipa-healthcheckUpgrade ipa-server-trust-adUpgrade softhsm-debuginfoUpgrade ipa-debugsourceUpgrade python3-ipatestsUpgrade python3-qrcodeUpgrade opendnssec-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade ipa-idoverride-memberof-pluginUpgrade python3-pyusbUpgrade ipa-client-sambaUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade opendnssecUpgrade ipa-serverUpgrade custodiaUpgrade python3-qrcode-coreUpgrade python3-yubicoUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade bind-dyndb-ldapUpgrade softhsm-debugsourceUpgrade python3-ipaserverUpgrade ipa-commonUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade opendnssec-debugsourceUpgrade python3-custodiaUpgrade python3-ipalibUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-commonUpgrade softhsm | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade softhsm-debuginfoUpgrade ipa-server-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-serverUpgrade ipa-debugsourceUpgrade ipa-clientUpgrade softhsm-develUpgrade ipa-debuginfoUpgrade ipa-client-epnUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade slapi-nis-debugsourceUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade slapi-nis-debuginfoUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade ipa-client-sambaUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub