A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade custodiaUpgrade python3-jwcryptoUpgrade python3-custodiaUpgrade python3-yubicoUpgrade python3-kdcproxyUpgrade python3-qrcode | May 4, 2022 | Apr 27, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-python-compatUpgrade ipa-serverUpgrade python2-ipalibUpgrade ipa-clientUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-client-common | Oct 28, 2020 | Apr 27, 2020 |
| Centos_linux | — | Upgrade ipa-server-commonUpgrade python2-ipalibUpgrade ipa-serverUpgrade opendnssecUpgrade python3-qrcodeUpgrade opendnssec-debugsourceUpgrade ipa-debugsourceUpgrade slapi-nis-debugsourceUpgrade ipa-server-dnsUpgrade softhsm-debugsourceUpgrade ipa-healthcheck-coreUpgrade ipa-clientUpgrade ipa-client-commonUpgrade ipa-python-compatUpgrade ipa-server-debuginfoUpgrade softhsmUpgrade ipa-client-debuginfoUpgrade python3-pyusbUpgrade python3-qrcode-coreUpgrade ipa-debuginfoUpgrade softhsm-develUpgrade python3-custodiaUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-adUpgrade python3-kdcproxyUpgrade python3-ipalibUpgrade opendnssec-debuginfoUpgrade ipa-client-epnUpgrade python3-jwcryptoUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debuginfoUpgrade python2-ipaclientUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade python3-yubicoUpgrade python2-ipaserverUpgrade softhsm-debuginfoUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nisUpgrade ipa-commonUpgrade python3-ipaserverUpgrade python3-ipaclient | Oct 1, 2020 | Apr 27, 2020 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-python | Jun 17, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-commonUpgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade python2-ipaclient | Sep 28, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-client-common | Sep 3, 2020 | Apr 27, 2020 |
| Oracle_linux | — | Upgrade python3-qrcodeUpgrade opendnssecUpgrade slapi-nisUpgrade ipa-client-sambaUpgrade softhsm-develUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade python3-ipaserverUpgrade softhsmUpgrade python2-ipalibUpgrade ipa-client-epnUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-client-commonUpgrade bind-dyndb-ldapUpgrade ipa-server-trust-adUpgrade python3-yubicoUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-healthcheckUpgrade python3-kdcproxyUpgrade ipa-selinuxUpgrade python2-ipaserverUpgrade custodiaUpgrade python2-ipaclientUpgrade python3-pyusbUpgrade python3-ipalib | Oct 7, 2020 | Apr 14, 2020 |
| Redhat_linux | — | Upgrade ipa-client-sambaUpgrade ipa-client-commonUpgrade softhsmUpgrade ipa-client-epnUpgrade softhsm-develUpgrade opendnssecUpgrade python3-qrcodeUpgrade ipa-client-debuginfoUpgrade python3-qrcode-coreUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade bind-dyndb-ldapUpgrade ipa-debugsourceUpgrade slapi-nis-debugsourceUpgrade python2-ipalibUpgrade python3-ipaclientUpgrade ipa-healthcheck-coreUpgrade ipa-python-compatUpgrade python3-custodiaUpgrade softhsm-debugsourceUpgrade ipa-server-trust-ad-debuginfoUpgrade python2-ipaserverUpgrade slapi-nis-debuginfoUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-selinuxUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-server-commonUpgrade ipa-serverUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade opendnssec-debugsourceNo solution existsUpgrade slapi-nisUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-server-debuginfoUpgrade python3-ipalibUpgrade python3-yubicoUpgrade bind-dyndb-ldap-debuginfoUpgrade custodiaUpgrade ipa-server-trust-adUpgrade ipa-healthcheck | Oct 1, 2020 | Apr 27, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub