Lucene search

ROSA LABROSA-SA-2024-2387

HistoryApr 02, 2024 - 7:03 a.m.

Advisory ROSA-SA-2024-2387

2024-04-0207:03:24

ROSA LAB

abf.rosalinux.ru

slapi-nis software rosa virtualization

cve-2021-3480

system crash

unauthenticated attacker

system availability

resolved vulnerability

yum update.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

Low

EPSS

0.001

Percentile

50.0%

JSON

Software: slapi-nis 0.56.6
OS: ROSA Virtualization 2.1

package_evr_string: slapi-nis-0.56.6-2.rv3

CVE-ID: CVE-2021-3480
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: Dereferencing a null pointer during DN binding analysis could allow an unauthenticated attacker to cause the 389-ds-base directory server to crash. The greatest threat from this vulnerability is related to system availability.
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update slapi-nis command