Description
A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | slapi-nis | slapi-nis 0.56.7 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | slapi-nis | 0.56.5-2 | — |
| Debian 12 | slapi-nis | 0.56.5-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | slapi-nis | No fix yet | — |
| Ubuntu 25.10 | slapi-nis | No fix yet | — |
| Ubuntu 24.04 LTS | slapi-nis | No fix yet | — |
| Ubuntu 22.04 LTS | slapi-nis | No fix yet | — |
| Ubuntu 20.04 LTS | slapi-nis | No fix yet | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | slapi-nis | No fix yet | — |
| Ubuntu 16.04 LTS | slapi-nis | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2021:1983 |
| RHEL 8 | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2021:1983 |
| RHEL 8 | ipa +15 | 4.9.2-3.module+el8.4.0+10412+5ecb5b37 | RHSA-2021:1983 |
| RHEL 8 | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9007+5084bdd8 | RHSA-2021:1983 |
| RHEL 8 | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2021:1983 |
| RHEL 8 | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2021:1983 |
| RHEL 8 | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2021:1983 |
| RHEL 8 | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2021:1983 |
| RHEL 8 | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2021:1983 |
| RHEL 8 | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2021:1983 |
| RHEL 8 | slapi-nis | 0.56.6-2.module+el8.4.0+10615+2234cc2c | RHSA-2021:1983 |
| RHEL 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2021:1983 |
| RHEL 7 | slapi-nis | 0.56.5-4.el7_9 | RHSA-2021:2032 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.2 EUS | bind-dyndb-ldap | 11.2-3.module+el8.2.0+4921+923e30d5 | RHSA-2021:2026 |
| RHEL 8.2 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | ipa +12 | 4.8.4-11.module+el8.2.0+10290+4658f31c | RHSA-2021:2026 |
| RHEL 8.2 EUS | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2021:2026 |
| RHEL 8.2 EUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2021:2026 |
| RHEL 8.2 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2021:2026 |
| RHEL 8.2 EUS | slapi-nis | 0.56.3-3.module+el8.2.0+10782+8facb0b2 | RHSA-2021:2026 |
| RHEL 8.2 EUS | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2021:2026 |
| RHEL 8.1 EUS | bind-dyndb-ldap | 11.1-14.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | ipa +12 | 4.8.0-13.module+el8.1.0+4923+c6efe041 | RHSA-2021:2027 |
| RHEL 8.1 EUS | ipa-healthcheck | 0.3-4.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | python-kdcproxy +1 | 0.4-3.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
| RHEL 8.1 EUS | slapi-nis | 0.56.3-3.module+el8.1.0+10781+dffa5bca | RHSA-2021:2027 |
| RHEL 8.1 EUS | softhsm +1 | 2.4.0-2.module+el8.1.0+4098+f286395e | RHSA-2021:2027 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | bind-dyndb-ldap | 11.6-2.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | custodia +1 | 0.6.0-3.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | opendnssec | 2.1.7-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | python3-kdcproxy | 0.4-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | python3-qrcode +1 | 5.1-12.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | python3-yubico | 1.3.2-9.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
| AlmaLinux 8 | softhsm +1 | 2.6.0-5.module_el8.5.0+2603+92118e57 | ALSA-2021:1983 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | custodia | 0.6.0-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | ipa | 4.9.2-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | ipa-healthcheck | 0.7-3.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | python-jwcrypto | 0.5.0-1.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | python-kdcproxy | 0.4-5.module+el8.3.0+244+0b2ae752 | RLSA-2021:1983 |
| Rocky Linux 8 | python-qrcode | 5.1-12.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | python-yubico | 1.3.2-9.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | pyusb | 1.0.0-9.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | slapi-nis | 0.56.6-2.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
| Rocky Linux 8 | softhsm | 2.6.0-5.module+el8.4.0+429+6bd33fea | RLSA-2021:1983 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | slapi-nis | 0.56.5-4.amzn2 | ALAS2-2021-1646 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+20088+3d202164 | ELSA-2021-1983 |
| Oracle Linux 8 | custodia +1 | 0.6.0-3.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | ipa-client +14 | 4.9.2-3.0.1.module+el8.4.0+20161+5ecb5b37 | ELSA-2021-1983 |
| Oracle Linux 8 | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+20088+3d202164 | ELSA-2021-1983 |
| Oracle Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+20088+3d202164 | ELSA-2021-1983 |
| Oracle Linux 8 | python3-jwcrypto | 0.5.0-1.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | python3-kdcproxy | 0.4-5.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | python3-pyusb | 1.0.0-9.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | python3-qrcode +1 | 5.1-12.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | python3-yubico | 1.3.2-9.module+el8.3.0+7868+2151076c | ELSA-2021-1983 |
| Oracle Linux 8 | slapi-nis | 0.56.6-2.module+el8.4.0+20174+ae9fc984 | ELSA-2021-1983 |
| Oracle Linux 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+20161+5ecb5b37 | ELSA-2021-1983 |
| Oracle Linux 7 | slapi-nis | 0.56.5-4.el7_9 | ELSA-2021-2032 |
Advisories 9
- ALSA-2021:1983 Important: idm:DL1 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2021:2032 Red Hat Security Advisory: slapi-nis security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RLSA-2021:1983 Important: idm:DL1 security update Rocky Linux Security Advisories · Feb 4, 2026
- RHSA-2021:2027 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2021:2026 Red Hat Security Advisory: ipa security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2021:1983 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ALAS2-2021-1646 Important: slapi-nis security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 22, 2021
- ELSA-2021-1983 Important: idm:DL1 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 26, 2021
- ELSA-2021-2032 Important: slapi-nis security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 19, 2021
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1944640
- FEDORA-2021-f93243d461 vendor-advisory
- FEDORA-2021-a4ee3426c4 vendor-advisory