A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade softhsm-develUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade custodiaUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-jwcryptoUpgrade bind-dyndb-ldapUpgrade opendnssec | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nis-debuginfoUpgrade slapi-nis | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade opendnssec-debuginfoUpgrade ipa-client-epnUpgrade slapi-nis-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldapUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade ipa-commonUpgrade softhsm-debuginfoUpgrade ipa-clientUpgrade python3-ipaserverUpgrade ipa-serverUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheckUpgrade ipa-client-sambaUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade python3-pyusbUpgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade custodiaUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python3-yubicoUpgrade opendnssecUpgrade slapi-nisUpgrade python3-qrcode-coreUpgrade softhsm-develUpgrade ipa-debugsourceUpgrade softhsm-debugsourceUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade softhsmUpgrade python3-kdcproxyUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfo | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade ipa-commonUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade python3-ipalibUpgrade softhsm-develUpgrade ipa-serverUpgrade custodiaUpgrade ipa-healthcheckUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade slapi-nisUpgrade ipa-client-sambaUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade ipa-client-epnUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-pyusbUpgrade ipa-python-compatUpgrade opendnssecUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade python3-qrcodeUpgrade python3-ipaclient | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade ipa-client-sambaUpgrade ipa-server-dnsUpgrade python3-custodiaUpgrade softhsm-debugsourceUpgrade ipa-idoverride-memberof-pluginUpgrade custodiaUpgrade python3-yubicoUpgrade python3-ipalibUpgrade python3-ipaserverUpgrade ipa-python-compatUpgrade opendnssecUpgrade softhsmUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-commonUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade softhsm-debuginfoUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade ipa-server-debuginfoUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade python3-qrcodeUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheck-coreUpgrade python3-kdcproxyUpgrade ipa-server-trust-ad-debuginfoNo solution exists | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade slapi-nis-debugsourceUpgrade ipa-serverUpgrade slapi-nisUpgrade softhsm-develUpgrade ipa-debugsourceUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-clientUpgrade ipa-server-debuginfoUpgrade ipa-debuginfoUpgrade softhsm-debuginfoUpgrade opendnssec-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-server-trust-adUpgrade softhsmUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldapUpgrade opendnssec-debugsourceUpgrade ipa-client-sambaUpgrade ipa-client-debuginfoUpgrade slapi-nis-debuginfoUpgrade opendnssec | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub