A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-yubicoUpgrade python3-jwcryptoUpgrade python3-qrcode-coreUpgrade python3-pyusbUpgrade python3-custodiaUpgrade custodiaUpgrade python3-kdcproxyUpgrade python3-qrcode | May 4, 2022 | Apr 27, 2020 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-python-compatUpgrade ipa-commonUpgrade python2-ipalibUpgrade python2-ipaserver | Oct 28, 2020 | Apr 27, 2020 |
| Centos_linux | — | Upgrade python3-qrcodeUpgrade ipa-clientUpgrade python3-custodiaUpgrade ipa-client-commonUpgrade ipa-healthcheck-coreUpgrade ipa-server-debuginfoUpgrade python3-pyusbUpgrade softhsm-develUpgrade slapi-nis-debugsourceUpgrade softhsm-debugsourceUpgrade softhsmUpgrade bind-dyndb-ldapUpgrade opendnssecUpgrade ipa-serverUpgrade ipa-debugsourceUpgrade python3-kdcproxyUpgrade python3-qrcode-coreUpgrade opendnssec-debuginfoUpgrade ipa-client-debuginfoUpgrade ipa-server-trust-adUpgrade python2-ipalibUpgrade ipa-debuginfoUpgrade ipa-server-dnsUpgrade ipa-python-compatUpgrade opendnssec-debugsourceUpgrade ipa-server-commonUpgrade python3-ipalibUpgrade python2-ipaserverUpgrade ipa-commonUpgrade softhsm-debuginfoUpgrade python3-ipaclientUpgrade slapi-nisUpgrade ipa-client-epnUpgrade python3-ipaserverUpgrade ipa-healthcheckUpgrade bind-dyndb-ldap-debugsourceUpgrade slapi-nis-debuginfoUpgrade python3-jwcryptoUpgrade custodiaUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debuginfoUpgrade python3-yubicoUpgrade ipa-selinuxUpgrade ipa-client-sambaUpgrade python2-ipaclient | Oct 1, 2020 | Apr 27, 2020 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-pythonUpgrade ipa-serverUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade ipa-admintoolsUpgrade ipa-server-trust-ad | Jun 17, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade python2-ipalibUpgrade ipa-client-commonUpgrade ipa-clientUpgrade ipa-serverUpgrade python2-ipaclientUpgrade ipa-admintoolsUpgrade ipa-server-trust-ad | Sep 28, 2020 | Apr 27, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-commonUpgrade ipa-clientUpgrade python2-ipaclientUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-server-commonUpgrade ipa-client-common | Sep 3, 2020 | Apr 27, 2020 |
| Oracle_linux | — | Upgrade ipa-client-sambaUpgrade ipa-healthcheck-coreUpgrade slapi-nisUpgrade softhsm-develUpgrade opendnssecUpgrade ipa-server-dnsUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-client-epnUpgrade python3-ipaclientUpgrade python3-jwcryptoUpgrade python3-ipaserverUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-serverUpgrade python3-qrcode-coreUpgrade python3-qrcodeUpgrade ipa-selinuxUpgrade bind-dyndb-ldapUpgrade python2-ipaclientUpgrade ipa-healthcheckUpgrade python3-kdcproxyUpgrade python3-pyusbUpgrade python3-ipalibUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade python2-ipaserverUpgrade python3-yubicoUpgrade custodiaUpgrade ipa-commonUpgrade ipa-server-common | Oct 7, 2020 | Apr 14, 2020 |
| Redhat_linux | — | Upgrade ipa-server-trust-ad-debuginfoUpgrade custodiaUpgrade opendnssec-debugsourceUpgrade ipa-healthcheckUpgrade python2-ipaserverUpgrade ipa-commonUpgrade python3-yubicoUpgrade slapi-nis-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade python3-ipalibUpgrade ipa-server-debuginfoUpgrade ipa-server-trust-adUpgrade python3-ipaserverUpgrade python2-ipaclientUpgrade softhsm-debuginfoUpgrade ipa-clientNo solution existsUpgrade opendnssec-debuginfoUpgrade slapi-nisUpgrade ipa-serverUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-selinuxUpgrade ipa-server-commonUpgrade python3-jwcryptoUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade python3-kdcproxyUpgrade softhsm-debugsourceUpgrade ipa-client-sambaUpgrade python3-qrcode-coreUpgrade python3-custodiaUpgrade softhsm-develUpgrade ipa-client-commonUpgrade slapi-nis-debugsourceUpgrade ipa-debugsourceUpgrade ipa-python-compatUpgrade ipa-healthcheck-coreUpgrade ipa-client-epnUpgrade python3-qrcodeUpgrade python2-ipalibUpgrade python3-pyusbUpgrade ipa-server-dnsUpgrade bind-dyndb-ldapUpgrade opendnssecUpgrade python3-ipaclientUpgrade ipa-debuginfo | Oct 1, 2020 | Apr 27, 2020 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 27, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub