A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade custodiaUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade softhsm-develUpgrade python3-yubicoUpgrade python3-qrcodeUpgrade opendnssecUpgrade bind-dyndb-ldapUpgrade python3-jwcryptoUpgrade softhsmUpgrade python3-qrcode-core | May 4, 2022 | May 20, 2021 |
| Amazon Linux Ami 2 | — | Upgrade slapi-nisUpgrade slapi-nis-debuginfo | Jun 24, 2021 | May 20, 2021 |
| Centos_linux | — | Upgrade ipa-server-debuginfoUpgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-healthcheck-coreUpgrade opendnssec-debugsourceUpgrade slapi-nisUpgrade softhsm-debugsourceUpgrade ipa-server-dnsUpgrade python3-pyusbUpgrade opendnssecUpgrade python3-ipalibUpgrade ipa-client-debuginfoUpgrade softhsm-develUpgrade softhsmUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade ipa-debugsourceUpgrade python3-kdcproxyUpgrade custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade slapi-nis-debugsourceUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-serverUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipatestsUpgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade python3-ipaclientUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade ipa-clientUpgrade ipa-client-sambaUpgrade ipa-common | Jun 1, 2021 | May 20, 2021 |
| Debian | — | Upgrade slapi-nis | Jul 30, 2024 | May 20, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade slapi-nis | Sep 16, 2021 | May 20, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade slapi-nis | Sep 7, 2021 | May 20, 2021 |
| Oracle_linux | — | Upgrade python3-qrcode-coreUpgrade ipa-client-commonUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade python3-pyusbUpgrade python3-ipaclientUpgrade python3-kdcproxyUpgrade ipa-server-commonUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade ipa-healthcheck-coreUpgrade softhsmUpgrade ipa-server-dnsUpgrade opendnssecUpgrade python3-qrcodeUpgrade softhsm-develUpgrade python3-ipalibUpgrade ipa-commonUpgrade ipa-selinuxUpgrade python3-ipatestsUpgrade python3-ipaserverUpgrade ipa-serverUpgrade ipa-clientUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade slapi-nisUpgrade python3-jwcryptoUpgrade ipa-server-trust-adUpgrade custodiaUpgrade ipa-healthcheck | May 20, 2021 | May 17, 2021 |
| Redhat_linux | — | Upgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-client-debuginfoUpgrade ipa-debuginfoUpgrade ipa-serverUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade opendnssec-debugsourceUpgrade softhsm-debugsourceUpgrade ipa-python-compatUpgrade python3-ipaserverUpgrade softhsmUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade ipa-commonUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-jwcryptoUpgrade opendnssecUpgrade softhsm-develUpgrade custodiaUpgrade ipa-idoverride-memberof-pluginUpgrade python3-yubicoUpgrade ipa-healthcheck-coreUpgrade python3-ipatestsUpgrade ipa-server-trust-ad-debuginfoNo solution existsUpgrade slapi-nisUpgrade slapi-nis-debuginfoUpgrade ipa-debugsourceUpgrade softhsm-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-debuginfoUpgrade python3-kdcproxyUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade opendnssec-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-qrcodeUpgrade slapi-nis-debugsource | May 21, 2021 | May 18, 2021 |
| Rocky_linux | — | Upgrade ipa-server-debuginfoUpgrade ipa-client-epnUpgrade opendnssec-debuginfoUpgrade softhsm-develUpgrade ipa-clientUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade slapi-nisUpgrade softhsm-debuginfoUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade bind-dyndb-ldapUpgrade softhsm-debugsourceUpgrade opendnssecUpgrade opendnssec-debugsourceUpgrade softhsmUpgrade ipa-server-trust-adUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-server-trust-ad-debuginfo | May 5, 2022 | May 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub