Skip to content
OpenAdvisories
High ALAS2-2021-1646 1 CVE

Important: slapi-nis security update (Amazon Linux 2)

Published Jun 16, 2021 · Updated Jun 22, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3480: A flaw was found in slapi-nis. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability. 1944640: CVE-2021-3480 slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 slapi-nis 0:0.56.5-4.amzn2
Amazon Linux · 2 slapi-nis-debuginfo 0:0.56.5-4.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3480.html