A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade python2-ipaserver | May 13, 2020 | Nov 27, 2019 |
| Centos_linux | — | Upgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-server-commonUpgrade python2-ipaserverUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade ipa-common | Feb 5, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-commonUpgrade ipa-client-common | Apr 16, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-python-compat | Feb 24, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade python2-ipaclient | Feb 6, 2020 | Aug 26, 2019 |
| Redhat_linux | — | Upgrade ipa-server-trust-adUpgrade python2-ipaserverNo solution existsUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-commonUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-debuginfo | Feb 5, 2020 | Nov 27, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub