CVE-2021-3480

Name of the Vulnerable Software and Affected Versions 389-ds-base versions prior to 0.56.7

Description A flaw was found in slapi-nis that could allow an unauthenticated attacker to crash the 389-ds-base directory server due to a NULL pointer dereference during the parsing of the Binding DN. The highest threat from this issue is to system availability. This could be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 0.56.7, update to version 0.56.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the slapi-nis component to minimize the risk of exploitation.