Every CVE Search/ Get API key

CVE-2019-14867

Code injection in FreeIPA

8.8 HighFix available

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

7.41%Up 4.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
CVE-2019-14867
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94, CWE-400
Updated
2026-11-02
EUVDEUVD-2019-0065 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
EUVD-2019-0065
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-7hpj-hfcr-5qwm 8.7

Code injection in FreeIPA

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
GHSA-7hpj-hfcr-5qwm
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-94, CWE-400
Updated
2026-11-02
NVD 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
CVE-2019-14867
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-94, CWE-400
Updated
2026-11-02
OSV 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
CVE-2019-14867
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-14867 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
DEBIAN-CVE-2019-14867
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-07
Show 8 moreShow less
OSVGHSA-7hpj-hfcr-5qwm 8.7

Code injection in FreeIPA

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
GHSA-7hpj-hfcr-5qwm
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-400, CWE-94
Updated
2026-11-02
OSVPYSEC-2026-636 8.7

Code injection in FreeIPA

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
PYSEC-2026-636
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHBA-2019:4268 8.8

Red Hat Bug Fix Advisory: idm:DL1 bug fix update

Record
RHBA-2019:4268
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0378 8.8

Red Hat Security Advisory: ipa security and bug fix update

Record
RHSA-2020:0378
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1269 8.8

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2020:1269
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-14867 8.8

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
UBUNTU-CVE-2019-14867
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALBA-2019:4268 No score

idm:DL1 bug fix update

Bug Fix(es):

  • IPA upgrade fails for latest ipa package when adtrust is installed (BZ#1773516)
Record
ALBA-2019:4268
Updated
2026-11-02
OSVPYSEC-2019-28 No score

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

Record
PYSEC-2019-28
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ipa
PyPI
4.6.2 up to 4.6.7
4.6.7
ipa
PyPI
4.7.0 up to 4.7.4
4.7.4
ipa
PyPI
4.8.0 up to 4.8.3
4.8.3
freeipa
PyPI
4.6.2 up to 4.6.7
4.6.7
freeipa
PyPI
4.7.0 up to 4.7.4
4.7.4
freeipa
PyPI
4.8.0 up to 4.8.3
4.8.3
custodia
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
custodia
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
python3-custodia
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-custodia
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.6.0-3.module_el8.5.0+2603+92118e57
0.6.0-3.module_el8.5.0+2603+92118e57
Show 175 moreShow less
Affected packages
PackageAffectedFixed
python3-jwcrypto
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.5.0-1.module_el8.5.0+2603+92118e57
0.5.0-1.module_el8.5.0+2603+92118e57
python3-jwcrypto
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.5.0-1.module_el8.6.0+2881+2f24dc92
0.5.0-1.module_el8.6.0+2881+2f24dc92
python3-jwcrypto
AlmaLinux:8
From an advisory covering 2 CVEs
before 0.5.0-1.module_el8.6.0+2737+7e73ea90
0.5.0-1.module_el8.6.0+2737+7e73ea90
python3-pyusb
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.0.0-9.module_el8.5.0+2603+92118e57
1.0.0-9.module_el8.5.0+2603+92118e57
python3-pyusb
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.0.0-9.module_el8.6.0+2881+2f24dc92
1.0.0-9.module_el8.6.0+2881+2f24dc92
python3-pyusb
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.0.0-9.module_el8.6.0+2737+7e73ea90
1.0.0-9.module_el8.6.0+2737+7e73ea90
python3-qrcode
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.6.0+2737+7e73ea90
5.1-12.module_el8.6.0+2737+7e73ea90
python3-qrcode-core
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.5.0+2603+92118e57
5.1-12.module_el8.5.0+2603+92118e57
python3-qrcode-core
AlmaLinux:8
From an advisory covering 2 CVEs
before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.3.2-9.module_el8.6.0+2737+7e73ea90
1.3.2-9.module_el8.6.0+2737+7e73ea90
python3-yubico
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.3.2-9.module_el8.6.0+2881+2f24dc92
1.3.2-9.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
From an advisory covering 2 CVEs
before 1.3.2-9.module_el8.5.0+2603+92118e57
1.3.2-9.module_el8.5.0+2603+92118e57
freeipa
Debian:12
before 4.8.3-1
4.8.3-1
freeipa
Debian:13
before 4.8.3-1
4.8.3-1
freeipa
Debian:14
before 4.8.3-1
4.8.3-1
ipa
PyPI
4.6.2 up to 4.6.7, plus listed versions
4.6.34.6.44.6.5
4.6.7
ipa
PyPI
4.7.0 up to 4.7.4, plus listed versions
4.7.14.7.2
4.7.4
ipa
PyPI
4.8.0 up to 4.8.3, plus listed versions
4.8.14.8.2
4.8.3
freeipa
PyPI
4.6.2 up to 4.6.7, plus listed versions
4.6.34.6.44.6.5
4.6.7
freeipa
PyPI
4.7.0 up to 4.7.4, plus listed versions
4.7.14.7.2
4.7.4
freeipa
PyPI
4.8.0 up to 4.8.3, plus listed versions
4.8.14.8.2
4.8.3
ipa
PyPI
4.6.2 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions
4.6.34.6.44.6.54.7.14.7.24.8.14.8.2
4.6.74.7.44.8.3
freeipa
PyPI
4.6.2 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions
4.6.34.6.44.6.54.7.14.7.24.8.14.8.2
4.6.74.7.44.8.3
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:11.1-14.module+el8.1.0+4098+f286395e
0:11.1-14.module+el8.1.0+4098+f286395e
custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.3-4.module+el8.1.0+4098+f286395e
0:0.3-4.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.0.4-6.module+el8.1.0+4098+f286395e
0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof-plugin
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.0.4-6.module+el8.1.0+4098+f286395e
0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
opendnssec
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8.1.0+4098+f286395e
0:1.4.14-1.module+el8.1.0+4098+f286395e
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.5.0-1.module+el8.1.0+4098+f286395e
0:0.5.0-1.module+el8.1.0+4098+f286395e
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.4-3.module+el8.1.0+4098+f286395e
0:0.4-3.module+el8.1.0+4098+f286395e
python-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.3.2-9.module+el8.1.0+4098+f286395e
0:1.3.2-9.module+el8.1.0+4098+f286395e
python3-custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-ipalib
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041
0:4.8.0-13.module+el8.1.0+4923+c6efe041
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.5.0-1.module+el8.1.0+4098+f286395e
0:0.5.0-1.module+el8.1.0+4098+f286395e
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.4-3.module+el8.1.0+4098+f286395e
0:0.4-3.module+el8.1.0+4098+f286395e
python3-pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.0.0-9.module+el8.1.0+4098+f286395e
0:1.0.0-9.module+el8.1.0+4098+f286395e
python3-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.3.2-9.module+el8.1.0+4098+f286395e
0:1.3.2-9.module+el8.1.0+4098+f286395e
pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:1.0.0-9.module+el8.1.0+4098+f286395e
0:1.0.0-9.module+el8.1.0+4098+f286395e
slapi-nis
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:0.56.3-2.module+el8.1.0+4098+f286395e
0:0.56.3-2.module+el8.1.0+4098+f286395e
softhsm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
softhsm-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8.1.0+4098+f286395e
0:2.4.0-2.module+el8.1.0+4098+f286395e
ipa
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-client-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-python-compat
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-common
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-dns
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
ipa-server-trust-ad
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaclient
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipalib
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
python2-ipaserver
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
before 0:4.6.5-11.el7_7.4
0:4.6.5-11.el7_7.4
bind-dyndb-ldap
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
bind-dyndb-ldap-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
bind-dyndb-ldap-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:11.1-13.module+el8+2555+b334d87b
0:11.1-13.module+el8+2555+b334d87b
custodia
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.6.0-2.module+el8+2555+b334d87b
0:0.6.0-2.module+el8+2555+b334d87b
ipa
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client-common
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-client-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-common
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-idoverride-memberof
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.0.4-6.module+el8+2555+b334d87b
0:0.0.4-6.module+el8+2555+b334d87b
ipa-idoverride-memberof-plugin
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.0.4-6.module+el8+2555+b334d87b
0:0.0.4-6.module+el8+2555+b334d87b
ipa-python-compat
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-common
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-dns
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-trust-ad
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
ipa-server-trust-ad-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
opendnssec
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
opendnssec-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
opendnssec-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.4.14-1.module+el8+2555+b334d87b
0:1.4.14-1.module+el8+2555+b334d87b
python-jwcrypto
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.5.0-1.module+el8+2555+b334d87b
0:0.5.0-1.module+el8+2555+b334d87b
python-kdcproxy
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.4-3.module+el8+2555+b334d87b
0:0.4-3.module+el8+2555+b334d87b
python-qrcode
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python-yubico
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.3.2-9.module+el8+2555+b334d87b
0:1.3.2-9.module+el8+2555+b334d87b
python3-custodia
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.6.0-2.module+el8+2555+b334d87b
0:0.6.0-2.module+el8+2555+b334d87b
python3-ipaclient
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-ipalib
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-ipaserver
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37
0:4.7.1-12.module+el8.0.0+5776+863ecd37
python3-jwcrypto
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.5.0-1.module+el8+2555+b334d87b
0:0.5.0-1.module+el8+2555+b334d87b
python3-kdcproxy
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.4-3.module+el8+2555+b334d87b
0:0.4-3.module+el8+2555+b334d87b
python3-pyusb
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.0.0-9.module+el8+2555+b334d87b
0:1.0.0-9.module+el8+2555+b334d87b
python3-qrcode
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python3-qrcode-core
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:5.1-11.module+el8+2555+b334d87b
0:5.1-11.module+el8+2555+b334d87b
python3-yubico
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.3.2-9.module+el8+2555+b334d87b
0:1.3.2-9.module+el8+2555+b334d87b
pyusb
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:1.0.0-9.module+el8+2555+b334d87b
0:1.0.0-9.module+el8+2555+b334d87b
slapi-nis
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
slapi-nis-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
slapi-nis-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:0.56.2-7.module+el8+2555+b334d87b
0:0.56.2-7.module+el8+2555+b334d87b
softhsm
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
softhsm-devel
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
before 0:2.4.0-2.module+el8+2555+b334d87b
0:2.4.0-2.module+el8+2555+b334d87b
freeipa
Ubuntu:Pro:14.04:LTS
All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
None known
freeipa
Ubuntu:Pro:16.04:LTS
All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
None known
freeipa
Ubuntu:18.04:LTS
All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
None known
freeipa
Ubuntu:20.04:LTS
All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
None known
freeipa
Ubuntu:22.04:LTS
All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
None known

History

History
RecordedChangedSources
affectedOSV
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-14867 is a high vulnerability (CVSS 8.8) in Freeipa, published November 27, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.41%, the 94th percentile. Fixed in ipa 4.6.7.

References

Show 30 moreShow less
MoveEnter Open