A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-kdcproxyUpgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-custodiaUpgrade softhsm-develUpgrade python3-qrcodeUpgrade python3-jwcryptoUpgrade softhsmUpgrade opendnssecUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldap | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nisUpgrade slapi-nis-debuginfo | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-clientUpgrade ipa-selinuxUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade softhsm-debuginfoUpgrade ipa-serverUpgrade slapi-nis-debuginfoUpgrade slapi-nis-debugsourceUpgrade python3-ipatestsUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-python-compatUpgrade python3-qrcode-coreUpgrade opendnssecUpgrade python3-kdcproxyUpgrade python3-qrcodeUpgrade ipa-debuginfoUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade softhsmUpgrade python3-yubicoUpgrade softhsm-debugsourceUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade custodiaUpgrade softhsm-develUpgrade slapi-nisUpgrade ipa-debugsource | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade python3-yubicoUpgrade ipa-client-sambaUpgrade python3-ipalibUpgrade ipa-healthcheckUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade slapi-nisUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade ipa-selinuxUpgrade python3-ipaserverUpgrade ipa-serverUpgrade custodiaUpgrade python3-ipatestsUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade opendnssecUpgrade python3-qrcodeUpgrade ipa-client-commonUpgrade python3-pyusbUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python3-custodiaUpgrade python3-kdcproxyUpgrade bind-dyndb-ldapUpgrade softhsmUpgrade ipa-client-epn | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade ipa-debuginfoUpgrade ipa-idoverride-memberof-pluginUpgrade bind-dyndb-ldapUpgrade ipa-serverUpgrade ipa-client-debuginfoUpgrade ipa-clientUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade python3-ipaserverUpgrade python3-qrcode-coreUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsmUpgrade python3-custodiaUpgrade opendnssecUpgrade opendnssec-debugsourceUpgrade ipa-client-sambaUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade python3-yubicoUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade custodiaUpgrade python3-jwcryptoUpgrade softhsm-develUpgrade python3-ipaclientUpgrade softhsm-debugsourceUpgrade ipa-server-debuginfoUpgrade slapi-nis-debuginfoUpgrade python3-kdcproxyUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-debugsourceNo solution existsUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-healthcheck-coreUpgrade ipa-healthcheckUpgrade python3-qrcodeUpgrade ipa-server-trust-adUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade slapi-nisUpgrade ipa-selinuxUpgrade slapi-nis-debugsource | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade ipa-client-debuginfoUpgrade opendnssec-debugsourceUpgrade ipa-client-sambaUpgrade bind-dyndb-ldap-debuginfoUpgrade softhsmUpgrade slapi-nis-debuginfoUpgrade softhsm-debugsourceUpgrade opendnssecUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-debuginfoUpgrade softhsm-develUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-debuginfoUpgrade ipa-client-epnUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade ipa-debugsourceUpgrade ipa-clientUpgrade slapi-nis-debugsourceUpgrade ipa-serverUpgrade softhsm-debuginfo | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub