A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade softhsm-develUpgrade custodiaUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade opendnssecUpgrade softhsmUpgrade python3-qrcode-coreUpgrade python3-qrcodeUpgrade python3-jwcrypto | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nis-debuginfoUpgrade slapi-nis | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade ipa-commonUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debuginfoUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade slapi-nis-debugsourceUpgrade python3-ipaclientUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade ipa-serverUpgrade python3-ipaserverUpgrade slapi-nis-debuginfoUpgrade ipa-clientUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-custodiaUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade ipa-client-debuginfoUpgrade ipa-healthcheck-coreUpgrade python3-qrcodeUpgrade ipa-python-compatUpgrade softhsm-debugsourceUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade slapi-nisUpgrade opendnssecUpgrade softhsm-develUpgrade custodiaUpgrade opendnssec-debugsourceUpgrade python3-kdcproxyUpgrade ipa-debugsourceUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade python3-pyusbUpgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade ipa-server-commonUpgrade ipa-debuginfo | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade ipa-client-sambaUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade python3-ipaserverUpgrade python3-ipalibUpgrade ipa-selinuxUpgrade python3-jwcryptoUpgrade slapi-nisUpgrade custodiaUpgrade python3-ipatestsUpgrade ipa-commonUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade softhsm-develUpgrade bind-dyndb-ldapUpgrade python3-kdcproxyUpgrade ipa-client-epnUpgrade ipa-python-compatUpgrade python3-pyusbUpgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade opendnssecUpgrade softhsmUpgrade python3-custodiaUpgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade ipa-server-common | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade ipa-client-commonUpgrade ipa-client-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-server-dnsUpgrade ipa-idoverride-memberof-pluginUpgrade ipa-serverUpgrade ipa-commonUpgrade python3-ipaclientUpgrade custodiaUpgrade python3-yubicoUpgrade softhsmUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade ipa-clientUpgrade opendnssec-debugsourceUpgrade softhsm-develUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade python3-ipaserverUpgrade ipa-debuginfoUpgrade ipa-client-sambaUpgrade opendnssecUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade python3-ipatestsNo solution existsUpgrade slapi-nis-debuginfoUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade python3-kdcproxyUpgrade slapi-nis-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade softhsm-debuginfoUpgrade ipa-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-qrcodeUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheck | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade bind-dyndb-ldapUpgrade softhsmUpgrade ipa-server-trust-adUpgrade bind-dyndb-ldap-debuginfoUpgrade opendnssec-debugsourceUpgrade opendnssecUpgrade slapi-nis-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad-debuginfoUpgrade softhsm-debugsourceUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade ipa-debugsourceUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade ipa-serverUpgrade slapi-nis-debugsourceUpgrade ipa-client-epnUpgrade softhsm-develUpgrade ipa-server-debuginfoUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debugsource | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub