Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2015-0283

slapi-nis: infinite loop in getgrnam_r() and getgrgid_r()

The slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user accounts, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request for a (1) group with a large number of members or (2) user that belongs to a large number of groups.

CVSS 2.0 · 7.8 High EPSS 3.1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Slapi-nis
CVE-2021-3480

slapi-nis: NULL dereference (DoS) with specially crafted Binding DN

A flaw was found in slapi-nis in versions before 0.56.7. A NULL pointer dereference during the parsing of the Binding DN could allow an unauthenticated attacker to crash the 389-ds-base directory server. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Fedoraproject Redhat Slapi-nis Project
Products
Fedora Enterprise Linux Rhel Eus and 1 more