The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ipa-server-dnsUpgrade python3-ipaclientUpgrade ipa-client-commonUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-clientUpgrade python3-ipalibUpgrade ipa-commonUpgrade python3-ipaserverUpgrade python3-ipatestsUpgrade ipa-selinuxUpgrade ipa-client-epnUpgrade ipa-client-sambaUpgrade ipa-server-trust-ad | May 8, 2024 | Apr 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade ipa-server-commonUpgrade python2-ipaclientUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade python2-ipalibUpgrade ipa-python-compatUpgrade ipa-server-dns | Mar 19, 2024 | Mar 19, 2024 |
| Debian | — | Upgrade freeipa | Mar 26, 2024 | Mar 26, 2024 |
| Oracle_linux | — | Upgrade ipa-healthcheck-coreUpgrade ipa-server-dnsUpgrade python3-ipalibUpgrade ipa-selinuxUpgrade python3-pyusbUpgrade ipa-server-trust-adUpgrade custodiaUpgrade slapi-nisUpgrade python3-qrcodeUpgrade python3-kdcproxyUpgrade softhsm-develUpgrade ipa-healthcheckUpgrade ipa-commonUpgrade python3-ipatestsUpgrade python3-jwcryptoUpgrade python3-yubicoUpgrade softhsmUpgrade python3-custodiaUpgrade ipa-server-commonUpgrade python3-ipaserverUpgrade opendnssecUpgrade bind-dyndb-ldapUpgrade ipa-client-sambaUpgrade ipa-clientUpgrade ipa-python-compatUpgrade ipa-client-epnUpgrade ipa-client-commonUpgrade python3-qrcode-coreUpgrade python3-ipaclientUpgrade ipa-server | May 7, 2024 | Feb 20, 2024 |
| Redhat_linux | — | Upgrade ipa-client-epnUpgrade bind-dyndb-ldap-debuginfoUpgrade ipa-clientUpgrade ipa-server-trust-adUpgrade ipa-server-trust-ad-debuginfoUpgrade bind-dyndb-ldap-debugsourceUpgrade ipa-commonUpgrade python3-ipatestsUpgrade python3-yubicoUpgrade ipa-client-sambaUpgrade ipa-healthcheckUpgrade softhsm-develUpgrade python3-jwcryptoUpgrade python3-ipaclientUpgrade opendnssec-debuginfoUpgrade softhsm-debuginfoUpgrade ipa-selinuxUpgrade ipa-serverUpgrade slapi-nis-debuginfoUpgrade ipa-debuginfoUpgrade custodiaUpgrade slapi-nisUpgrade bind-dyndb-ldapUpgrade python3-ipaserverUpgrade python3-qrcode-coreUpgrade python3-kdcproxyUpgrade slapi-nis-debugsourceUpgrade ipa-client-commonUpgrade ipa-debugsourceNo solution existsUpgrade ipa-healthcheck-coreUpgrade python3-pyusbUpgrade ipa-client-debuginfoUpgrade softhsmUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade ipa-server-dnsUpgrade python3-custodiaUpgrade opendnssec-debugsourceUpgrade opendnssecUpgrade python3-ipalibUpgrade softhsm-debugsourceUpgrade ipa-server-debuginfoUpgrade python3-qrcode | May 1, 2024 | Apr 10, 2024 |
| Rocky_linux | — | Upgrade softhsmUpgrade opendnssec-debugsourceUpgrade slapi-nis-debugsourceUpgrade softhsm-debuginfoUpgrade opendnssec-debuginfoUpgrade slapi-nisUpgrade softhsm-debugsourceUpgrade opendnssecUpgrade softhsm-develUpgrade slapi-nis-debuginfo | Jun 17, 2024 | Apr 10, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub