A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-qrcodeUpgrade bind-dyndb-ldapUpgrade python3-jwcryptoUpgrade opendnssecUpgrade custodiaUpgrade softhsm-develUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-custodia | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nis-debuginfoUpgrade slapi-nis | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade opendnssec-debugsourceUpgrade ipa-debugsourceUpgrade slapi-nisUpgrade python3-yubicoUpgrade python3-pyusbUpgrade python3-ipalibUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade python3-qrcodeUpgrade ipa-server-trust-adUpgrade softhsm-debugsourceUpgrade python3-qrcode-coreUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade opendnssecUpgrade custodiaUpgrade ipa-debuginfoUpgrade python3-kdcproxyUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade ipa-server-commonUpgrade softhsm-debuginfoUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-serverUpgrade ipa-selinuxUpgrade slapi-nis-debuginfoUpgrade python3-ipaclientUpgrade slapi-nis-debugsourceUpgrade python3-ipaserverUpgrade bind-dyndb-ldapUpgrade python3-custodiaUpgrade ipa-client-epnUpgrade opendnssec-debuginfoUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade bind-dyndb-ldap-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade python3-jwcryptoUpgrade python3-ipatests | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade bind-dyndb-ldapUpgrade ipa-client-epnUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade opendnssecUpgrade ipa-clientUpgrade python3-yubicoUpgrade ipa-commonUpgrade ipa-client-sambaUpgrade custodiaUpgrade python3-ipaserverUpgrade python3-jwcryptoUpgrade ipa-healthcheckUpgrade ipa-server-trust-adUpgrade slapi-nisUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade softhsm-develUpgrade python3-ipalibUpgrade ipa-server | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade ipa-serverUpgrade python3-custodiaUpgrade python3-pyusbUpgrade ipa-server-dnsUpgrade opendnssecUpgrade ipa-clientUpgrade opendnssec-debugsourceUpgrade ipa-client-commonUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade python3-qrcode-coreUpgrade softhsm-debugsourceUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade ipa-commonUpgrade softhsmUpgrade bind-dyndb-ldap-debuginfoUpgrade bind-dyndb-ldapUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade custodiaUpgrade ipa-debuginfoUpgrade python3-yubicoUpgrade ipa-idoverride-memberof-pluginUpgrade softhsm-develUpgrade python3-ipalibUpgrade python3-ipaserverUpgrade opendnssec-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-client-epnUpgrade python3-ipatestsUpgrade ipa-healthcheck-coreUpgrade ipa-selinuxUpgrade bind-dyndb-ldap-debugsourceUpgrade softhsm-debuginfoUpgrade slapi-nisNo solution existsUpgrade ipa-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-healthcheckUpgrade python3-qrcodeUpgrade slapi-nis-debugsourceUpgrade python3-kdcproxyUpgrade ipa-server-debuginfoUpgrade slapi-nis-debuginfo | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade softhsm-develUpgrade ipa-server-debuginfoUpgrade slapi-nisUpgrade ipa-client-epnUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade opendnssec-debuginfoUpgrade ipa-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-serverUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldapUpgrade slapi-nis-debuginfoUpgrade ipa-client-sambaUpgrade opendnssecUpgrade softhsm-debugsourceUpgrade opendnssec-debugsource | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub