A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipalibUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-python-compatUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-server-common | May 13, 2020 | Nov 27, 2019 |
| Centos_linux | — | Upgrade python2-ipalibUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-serverUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade ipa-client | Feb 5, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-server-common | Apr 16, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade ipa-python-compatUpgrade python2-ipaclientUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade ipa-client-common | Feb 24, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade ipa-python-compatUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade python2-ipaserverUpgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade ipa-server-common | Feb 6, 2020 | Aug 26, 2019 |
| Redhat_linux | — | Upgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-debuginfoUpgrade ipa-serverUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-server-dnsUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserverNo solution exists | Feb 5, 2020 | Nov 27, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub