A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-kdcproxyUpgrade python3-custodiaUpgrade softhsm-develUpgrade python3-pyusbUpgrade python3-yubicoUpgrade custodiaUpgrade opendnssecUpgrade softhsmUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade python3-qrcodeUpgrade python3-qrcode-core | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nisUpgrade slapi-nis-debuginfo | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade python3-ipaclientUpgrade python3-ipaserverUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade ipa-selinuxUpgrade slapi-nis-debuginfoUpgrade ipa-client-sambaUpgrade ipa-healthcheckUpgrade opendnssec-debuginfoUpgrade ipa-commonUpgrade slapi-nis-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-jwcryptoUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-serverUpgrade python3-ipatestsUpgrade softhsm-debuginfoUpgrade ipa-client-epnUpgrade ipa-server-commonUpgrade softhsmUpgrade python3-qrcodeUpgrade python3-yubicoUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade custodiaUpgrade python3-pyusbUpgrade opendnssec-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-python-compatUpgrade ipa-client-debuginfoUpgrade opendnssecUpgrade softhsm-develUpgrade slapi-nisUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade ipa-healthcheck-coreUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade softhsm-debugsourceUpgrade ipa-debuginfoUpgrade ipa-debugsource | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade python3-ipaclientUpgrade python3-qrcodeUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade softhsmUpgrade opendnssecUpgrade ipa-server-dnsUpgrade ipa-healthcheck-coreUpgrade python3-custodiaUpgrade ipa-client-epnUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade bind-dyndb-ldapUpgrade python3-kdcproxyUpgrade ipa-selinuxUpgrade ipa-healthcheckUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade python3-ipalibUpgrade ipa-serverUpgrade python3-ipaserverUpgrade python3-ipatestsUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade custodiaUpgrade softhsm-develUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade slapi-nis | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade ipa-serverUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade python3-ipaserverUpgrade ipa-debuginfoUpgrade opendnssec-debugsourceUpgrade opendnssecUpgrade bind-dyndb-ldapUpgrade softhsm-debugsourceUpgrade softhsmUpgrade ipa-client-sambaUpgrade python3-jwcryptoUpgrade custodiaUpgrade python3-ipaclientUpgrade ipa-client-debuginfoUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade softhsm-develUpgrade ipa-server-dnsUpgrade ipa-idoverride-memberof-pluginUpgrade python3-yubicoUpgrade opendnssec-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheckUpgrade python3-qrcodeUpgrade ipa-client-epnUpgrade slapi-nis-debugsourceUpgrade python3-ipatestsUpgrade ipa-server-debuginfoUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade softhsm-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade ipa-debugsourceNo solution existsUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debuginfoUpgrade python3-kdcproxy | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade ipa-client-epnUpgrade slapi-nis-debugsourceUpgrade softhsm-develUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade opendnssec-debuginfoUpgrade slapi-nisUpgrade ipa-server-debuginfoUpgrade ipa-clientUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-debugsourceUpgrade ipa-client-sambaUpgrade slapi-nis-debuginfoUpgrade opendnssecUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldap | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub