A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade python3-custodiaUpgrade custodiaUpgrade python3-yubicoUpgrade python3-qrcode-coreUpgrade python3-jwcryptoUpgrade python3-pyusb | May 4, 2022 | Apr 27, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-clientUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade ipa-serverUpgrade python2-ipaserverUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-server-trust-adUpgrade ipa-server-dns | Oct 28, 2020 | Apr 27, 2020 |
| Centos_linux | — | Upgrade python3-yubicoUpgrade slapi-nis-debuginfoUpgrade python3-jwcryptoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-client-epnUpgrade ipa-healthcheckUpgrade slapi-nisUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade ipa-commonUpgrade python3-ipaclientUpgrade ipa-selinuxUpgrade python2-ipaclientUpgrade custodiaUpgrade softhsm-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipaserverUpgrade ipa-client-sambaUpgrade ipa-debugsourceUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-server-commonUpgrade python3-qrcodeUpgrade python3-custodiaUpgrade ipa-server-debuginfoUpgrade ipa-healthcheck-coreUpgrade ipa-server-trust-adUpgrade python3-kdcproxyUpgrade slapi-nis-debugsourceUpgrade python3-pyusbUpgrade python3-ipalibUpgrade opendnssec-debuginfoUpgrade opendnssecUpgrade ipa-client-debuginfoUpgrade bind-dyndb-ldapUpgrade python3-qrcode-coreUpgrade python2-ipalibUpgrade softhsm-debugsourceUpgrade softhsmUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade softhsm-develUpgrade opendnssec-debugsource | Oct 1, 2020 | Apr 27, 2020 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-python | Jun 17, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python2-ipaserverUpgrade ipa-clientUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-admintoolsUpgrade ipa-serverUpgrade ipa-client-common | Sep 28, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-client | Sep 3, 2020 | Apr 27, 2020 |
| Oracle_linux | — | Upgrade python3-qrcodeUpgrade ipa-healthcheck-coreUpgrade ipa-client-sambaUpgrade ipa-server-dnsUpgrade python3-qrcode-coreUpgrade softhsmUpgrade python3-jwcryptoUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-clientUpgrade opendnssecUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade softhsm-develUpgrade ipa-serverUpgrade slapi-nisUpgrade python3-custodiaUpgrade python3-ipaclientUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipaclientUpgrade bind-dyndb-ldapUpgrade ipa-client-commonUpgrade python3-ipalibUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade ipa-healthcheckUpgrade custodiaUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade python3-yubicoUpgrade ipa-selinux | Oct 7, 2020 | Apr 14, 2020 |
| Redhat_linux | — | Upgrade python2-ipaserverUpgrade ipa-serverUpgrade softhsm-debuginfoUpgrade python3-jwcryptoUpgrade ipa-clientUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade ipa-server-commonUpgrade custodiaUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade ipa-server-trust-adUpgrade slapi-nis-debuginfoUpgrade ipa-selinuxUpgrade ipa-server-debuginfoUpgrade python3-yubicoUpgrade ipa-healthcheckUpgrade opendnssec-debugsourceUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipalibUpgrade ipa-commonUpgrade python3-ipaserverUpgrade python2-ipaclientNo solution existsUpgrade python3-custodiaUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade ipa-client-sambaUpgrade ipa-client-commonUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade bind-dyndb-ldapUpgrade python2-ipalibUpgrade python3-qrcodeUpgrade opendnssecUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade ipa-python-compatUpgrade python3-kdcproxyUpgrade softhsm-develUpgrade softhsm-debugsource | Oct 1, 2020 | Apr 27, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub