Description
The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | slapi-nis | 0.54.2-1 | — |
| Debian 12 | slapi-nis | 0.54.2-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | ipa +2 | 4.1.0-18.ael7b_1.3 | RHSA-2015:0728 |
| RHEL 7 | ipa-server +2 | 4.1.0-18.el7_1.3 | RHSA-2015:0728 |
| RHEL 7 | slapi-nis | 0.54-3.ael7b_1 | RHSA-2015:0728 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | ipa-client +4 | 4.1.0-18.0.1.el7_1.3 | ELSA-2015-0728 |
| Oracle Linux 7 | slapi-nis | 0.54-3.el7_1 | ELSA-2015-0728 |
Advisories 2
- RHSA-2015:0728 Red Hat Security Advisory: ipa and slapi-nis security and bug fix update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- ELSA-2015-0728 Moderate: ipa and slapi-nis security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 26, 2015
References
- https://git.fedorahosted.org/cgit/slapi-nis.git/commit/?id=6573f91c95f7a353ad3bdf2fe95b0c15932aa097
- FEDORA-2015-4747 vendor-advisory
- FEDORA-2015-4788 vendor-advisory
- 73377 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1195729
- RHSA-2015:0728 vendor-advisory