Skip to content
Fencer Vulns
high 7.5

CVE-2021-3480 json

A flaw was found in slapi-nis in versions before 0.56.7.

published 2021-05-20 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-26802

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.7%
EPSS 1.7% chance of exploitation in 30 days, percentile 77%
public exploits
0
none known

Summary

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.

Patch / fix

  • slapi-nis_project slapi-nis 0.56.7
  • slapi-nis Debian 13, Debian 12 0.56.5-2

debian advisories DEBIAN-CVE-2021-3480

  • pyusb RHEL 8, RHEL 8.2 EUS, RHEL 8.1 EUS 1.0.0-9.module+el8.1.0+4098+f286395e
  • custodia RHEL 8, RHEL 8.2 EUS, RHEL 8.1 EUS 0.6.0-3.module+el8.1.0+4098+f286395e
  • python-qrcode RHEL 8, RHEL 8.2 EUS, RHEL 8.1 EUS 5.1-12.module+el8.1.0+4098+f286395e
  • python-yubico RHEL 8, RHEL 8.2 EUS, RHEL 8.1 EUS 1.3.2-9.module+el8.1.0+4098+f286395e
  • slapi-nis RHEL 7 0.56.5-4.el7_9
  • ipa RHEL 8 4.9.2-3.module+el8.4.0+10412+5ecb5b37
  • softhsm RHEL 8 2.6.0-5.module+el8.4.0+10227+076cd560
  • slapi-nis RHEL 8 0.56.6-2.module+el8.4.0+10615+2234cc2c

red hat advisories RHSA-2021:2026RHSA-2021:2027RHSA-2021:2032RHSA-2021:1983

  • softhsm AlmaLinux 8 2.6.0-5.module_el8.5.0+2603+92118e57
  • softhsm AlmaLinux 8 2.6.0-5.module_el8.6.0+2881+2f24dc92
  • custodia AlmaLinux 8 0.6.0-3.module_el8.6.0+2881+2f24dc92
  • custodia AlmaLinux 8 0.6.0-3.module_el8.5.0+2603+92118e57
  • opendnssec AlmaLinux 8 2.1.7-1.module_el8.6.0+2881+2f24dc92
  • opendnssec AlmaLinux 8 2.1.7-1.module_el8.5.0+2603+92118e57
  • python3-pyusb AlmaLinux 8 1.0.0-9.module_el8.5.0+2603+92118e57
  • python3-pyusb AlmaLinux 8 1.0.0-9.module_el8.6.0+2881+2f24dc92

almalinux advisories ALSA-2021:1983

  • ipa Rocky Linux 8 4.9.2-3.module+el8.4.0+429+6bd33fea
  • pyusb Rocky Linux 8 1.0.0-9.module+el8.4.0+429+6bd33fea
  • pyusb Rocky Linux 8 1.0.0-9.1.module+el8.7.0+1074+aae18f3a
  • softhsm Rocky Linux 8 2.6.0-5.module+el8.4.0+429+6bd33fea
  • custodia Rocky Linux 8 0.6.0-3.module+el8.4.0+429+6bd33fea
  • slapi-nis Rocky Linux 8 0.56.6-2.module+el8.4.0+429+6bd33fea
  • opendnssec Rocky Linux 8 2.1.7-1.module+el8.4.0+429+6bd33fea
  • python-qrcode Rocky Linux 8 5.1-12.module+el8.4.0+429+6bd33fea

rocky linux advisories RLSA-2021:1983

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2021-3480 updated cvss 7.5

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

  • Red Hat Enterprise Linux 6 slapi-nis
    affected: workaround, no fix planned “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.”
  • Red Hat Enterprise Linux AppStream (v. 8) ipa 4.9.2-3.module+el8.4.0+10412+5ecb5b37, pyusb 1.0.0-9.module+el8.1.0+4098+f286395e, custodia 0.6.0-3.module+el8.1.0+4098+f286395e, softhsm 2.6.0-5.module+el8.4.0+10227+076cd560, opendnssec 2.1.7-1.module+el8.4.0+9007+5084bdd8, ipa-client 4.9.2-3.module+el8.4.0+10412+5ecb5b37, +29 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.” RHSA-2021:1983
  • Red Hat Enterprise Linux AppStream EUS (v. 8.1) ipa 4.8.0-13.module+el8.1.0+4923+c6efe041, pyusb 1.0.0-9.module+el8.1.0+4098+f286395e, softhsm 2.4.0-2.module+el8.1.0+4098+f286395e, custodia 0.6.0-3.module+el8.1.0+4098+f286395e, ipa-client 4.8.0-13.module+el8.1.0+4923+c6efe041, ipa-common 4.8.0-13.module+el8.1.0+4923+c6efe041, +27 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.” RHSA-2021:2027
  • Red Hat Enterprise Linux AppStream EUS (v. 8.2) ipa 4.8.4-11.module+el8.2.0+10290+4658f31c, pyusb 1.0.0-9.module+el8.1.0+4098+f286395e, softhsm 2.4.0-4.module+el8.2.0+5779+a38c524f, custodia 0.6.0-3.module+el8.1.0+4098+f286395e, opendnssec 1.4.14-1.module+el8.1.0+4098+f286395e, slapi-nis 0.56.3-3.module+el8.2.0+10782+8facb0b2, +28 more
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.” RHSA-2021:2026
  • Red Hat Enterprise Linux Client Optional (v. 7) slapi-nis 0.56.5-4.el7_9 Red Hat Enterprise Linux ComputeNode Optional (v. 7) slapi-nis 0.56.5-4.el7_9 Red Hat Enterprise Linux Server (v. 7) slapi-nis 0.56.5-4.el7_9 Red Hat Enterprise Linux Workstation (v. 7) slapi-nis 0.56.5-4.el7_9
    fixed: vendor fix “Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update as soon as possible.” RHSA-2021:2032
  • Red Hat Enterprise Linux 9 slapi-nis
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.70% chance of exploitation in the next 30 days, higher than 77% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • n/a slapi-nis

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.