vulnerability

Rocky Linux: CVE-2024-1481: idm-DL1 (RLSA-2024-3044)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 10, 2024
Added
Jun 17, 2024
Modified
Mar 31, 2026

Description

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Solutions

rocky-upgrade-opendnssecrocky-upgrade-opendnssec-debuginforocky-upgrade-opendnssec-debugsourcerocky-upgrade-slapi-nisrocky-upgrade-slapi-nis-debuginforocky-upgrade-slapi-nis-debugsourcerocky-upgrade-softhsmrocky-upgrade-softhsm-debuginforocky-upgrade-softhsm-debugsourcerocky-upgrade-softhsm-devel
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.