The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-server-commonUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-serverUpgrade python3-ipalibUpgrade ipa-server-dnsUpgrade ipa-client-epnUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade python3-ipaserver | May 8, 2024 | Apr 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python2-ipaserverUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-server | Mar 19, 2024 | Mar 19, 2024 |
| Debian | — | Upgrade freeipa | Mar 26, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade ipa-server-trust-adUpgrade ipa-healthcheck-coreUpgrade python3-ipalibUpgrade python3-pyusbUpgrade ipa-selinuxUpgrade ipa-server-dnsUpgrade python3-qrcodeUpgrade custodiaUpgrade slapi-nisUpgrade python3-kdcproxyUpgrade python3-jwcryptoUpgrade python3-ipatestsUpgrade ipa-client-commonUpgrade python3-qrcode-coreUpgrade ipa-serverUpgrade ipa-server-commonUpgrade python3-custodiaUpgrade softhsm-develUpgrade python3-ipaserverUpgrade opendnssecUpgrade python3-yubicoUpgrade softhsmUpgrade ipa-client-sambaUpgrade ipa-clientUpgrade ipa-client-epnUpgrade ipa-commonUpgrade bind-dyndb-ldapUpgrade ipa-python-compatUpgrade ipa-healthcheckUpgrade python3-ipaclient | May 7, 2024 | Feb 20, 2024 |
| Redhat_linux | — | Upgrade opendnssecUpgrade python3-qrcodeUpgrade ipa-debugsourceUpgrade ipa-client-debuginfoUpgrade ipa-client-commonNo solution existsUpgrade softhsmUpgrade ipa-server-commonUpgrade ipa-healthcheck-coreUpgrade softhsm-debugsourceUpgrade ipa-server-debuginfoUpgrade opendnssec-debugsourceUpgrade python3-qrcode-coreUpgrade python3-ipalibUpgrade slapi-nis-debugsourceUpgrade python3-custodiaUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade python3-pyusbUpgrade python3-kdcproxyUpgrade ipa-commonUpgrade ipa-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-yubicoUpgrade python3-jwcryptoUpgrade slapi-nis-debuginfoUpgrade custodiaUpgrade ipa-selinuxUpgrade python3-ipaclientUpgrade ipa-client-sambaUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-healthcheckUpgrade softhsm-develUpgrade bind-dyndb-ldapUpgrade ipa-serverUpgrade python3-ipaserverUpgrade ipa-clientUpgrade ipa-client-epnUpgrade slapi-nisUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-ipatests | May 1, 2024 | Apr 10, 2024 |
| Rocky_linux | — | Upgrade softhsm-develUpgrade opendnssecUpgrade slapi-nis-debuginfoUpgrade opendnssec-debuginfoUpgrade softhsmUpgrade softhsm-debugsourceUpgrade opendnssec-debugsourceUpgrade softhsm-debuginfoUpgrade slapi-nisUpgrade slapi-nis-debugsource | Jun 17, 2024 | Apr 10, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub