Every CVE Search/ Get API key

CVE-2024-1481

Freeipa: specially crafted http requests potentially lead to denial of service

5.3 MediumFix available

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

1.13%Up 1.1 points since Apr 11, 2024
90%50%10%1%

What each source reports

CVE List Score used 5.3

Freeipa: specially crafted http requests potentially lead to denial of service

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
CVE-2024-1481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-20
Updated
2026-11-05
EUVDEUVD-2024-17231 5.3

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
EUVD-2024-17231
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-05
GitHub AdvisoriesGHSA-5g67-qx42-9m78 5.3

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with...

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
GHSA-5g67-qx42-9m78
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-20
Updated
2026-11-02
NVD 5.3

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
CVE-2024-1481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-20
Updated
2026-11-05
OSV 5.3

Freeipa: specially crafted http requests potentially lead to denial of service

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
CVE-2024-1481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-20
Updated
2026-11-07
OSVDEBIAN-CVE-2024-1481 5.3

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
DEBIAN-CVE-2024-1481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-07
Show 6 moreShow less
OSVRHSA-2024:2147 5.3

Red Hat Security Advisory: ipa security update

Record
RHSA-2024:2147
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2024:3044 5.3

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2024:3044
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2024-1481 5.3

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Record
UBUNTU-CVE-2024-1481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVALSA-2024:2147 No score

Moderate: ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:2147
Updated
2026-11-02
OSVCLSA-2026-1778881463 No score

ipa: Fix of 3 CVEs

  • CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints
  • CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection
  • CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin
Record
CLSA-2026-1778881463
Updated
2026-11-02
OSVRLSA-2024:3044 No score

Moderate: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:3044
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ipa-client
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-client-common
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-client-epn
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-client-samba
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-common
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-selinux
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-server
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-server-common
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-server-dns
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-server-trust-ad
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
Show 110 moreShow less
Affected packages
PackageAffectedFixed
python3-ipaclient
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
python3-ipalib
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
python3-ipaserver
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
python3-ipatests
AlmaLinux:9
 before 4.11.0-9.el9_4
4.11.0-9.el9_4
ipa-client
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-client-common
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-client-epn
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-client-samba
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-common
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-python-compat
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-selinux
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-server
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-server-common
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-server-dns
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
ipa-server-trust-ad
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
python3-ipaclient
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
python3-ipalib
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
python3-ipaserver
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
python3-ipatests
TuxCare:AlmaLinux:9.2
From an advisory covering 3 CVEs
 before 4.10.1-9.el9_2.alma.1.tuxcare.els3
4.10.1-9.el9_2.alma.1.tuxcare.els3
freeipa
Debian:12
 All versions, plus listed versions
4.10.1+dfsg1-1+exp14.10.1-1+exp14.10.2-14.10.2-24.10.2-2+exp1
Show 14 moreShow less
4.11.1-14.11.1-1+exp14.11.1-24.11.1-2+exp14.11.1-2.14.12.2-14.12.2-24.12.2-34.12.4-14.12.4-24.13.1-14.9.11-14.9.11-1+exp14.9.11-2
 None known
freeipa
Debian:13
 before 4.12.2-1
4.12.2-1
freeipa
Debian:14
 before 4.12.2-1
4.12.2-1
freeipa
Debian:10
 before 4.7.2-3+deb10u1, plus listed versions
4.7.2-3
4.7.2-3+deb10u1
ipa
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-client
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-client-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-client-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-client-epn
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-client-samba
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-selinux
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server-common
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server-dns
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server-trust-ad
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
python3-ipaclient
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
python3-ipalib
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
python3-ipaserver
Red Hat:enterprise_linux:9::appstream
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
python3-ipatests
Red Hat:enterprise_linux:9::crb
 before 0:4.11.0-9.el9_4
0:4.11.0-9.el9_4
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-4.module+el8.9.0+18911+94941f82
0:11.6-4.module+el8.9.0+18911+94941f82
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-4.module+el8.9.0+18911+94941f82
0:11.6-4.module+el8.9.0+18911+94941f82
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:11.6-4.module+el8.9.0+18911+94941f82
0:11.6-4.module+el8.9.0+18911+94941f82
custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
ipa
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-client
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-client-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-client-epn
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
 before 0:0.12-3.module+el8.9.0+19692+fac39a03
0:0.12-3.module+el8.9.0+19692+fac39a03
ipa-healthcheck-core
Red Hat:enterprise_linux:8::appstream
 before 0:0.12-3.module+el8.9.0+19692+fac39a03
0:0.12-3.module+el8.9.0+19692+fac39a03
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-selinux
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
ipa-server
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
ipa-server-common
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
opendnssec
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-1.1.module+el8.9.0+18920+2223d05e
0:0.5.0-1.1.module+el8.9.0+18920+2223d05e
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-5.module+el8.9.0+18911+94941f82
0:0.4-5.module+el8.9.0+18911+94941f82
python-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.9.0+18920+2223d05e
0:5.1-12.module+el8.9.0+18920+2223d05e
python-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
python3-custodia
Red Hat:enterprise_linux:8::appstream
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
python3-ipalib
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21433+ee1111fd
0:4.9.13-8.module+el8.10.0+21433+ee1111fd
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
python3-ipatests
Red Hat:enterprise_linux:8::appstream
 before 0:4.9.13-8.module+el8.10.0+21432+ee17c097
0:4.9.13-8.module+el8.10.0+21432+ee17c097
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
 before 0:0.5.0-1.1.module+el8.9.0+18920+2223d05e
0:0.5.0-1.1.module+el8.9.0+18920+2223d05e
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
 before 0:0.4-5.module+el8.9.0+18911+94941f82
0:0.4-5.module+el8.9.0+18911+94941f82
python3-pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
python3-qrcode
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.9.0+18920+2223d05e
0:5.1-12.module+el8.9.0+18920+2223d05e
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
 before 0:5.1-12.module+el8.9.0+18920+2223d05e
0:5.1-12.module+el8.9.0+18920+2223d05e
python3-yubico
Red Hat:enterprise_linux:8::appstream
 before 0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
0:1.3.2-9.1.module+el8.9.0+18920+2223d05e
pyusb
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
0:1.0.0-9.1.module+el8.9.0+18920+2223d05e
slapi-nis
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
softhsm
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
custodia
Rocky Linux:8
 before 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
ipa-healthcheck
Rocky Linux:8
 before 0:0.12-3.module+el8.9.0+1433+5bd2f890
0:0.12-3.module+el8.9.0+1433+5bd2f890
opendnssec
Rocky Linux:8
 before 0:2.1.7-1.module+el8.9.0+1371+ffa84eb9
0:2.1.7-1.module+el8.9.0+1371+ffa84eb9
python-kdcproxy
Rocky Linux:8
 before 0:0.4-5.module+el8.9.0+1371+ffa84eb9
0:0.4-5.module+el8.9.0+1371+ffa84eb9
python-qrcode
Rocky Linux:8
 before 0:5.1-12.module+el8.9.0+1371+ffa84eb9
0:5.1-12.module+el8.9.0+1371+ffa84eb9
python-yubico
Rocky Linux:8
 before 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
pyusb
Rocky Linux:8
 before 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
slapi-nis
Rocky Linux:8
 before 0:0.60.0-4.module+el8.9.0+1573+39ab85f4
0:0.60.0-4.module+el8.9.0+1573+39ab85f4
softhsm
Rocky Linux:8
 before 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
freeipa
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
 None known
freeipa
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
 None known
freeipa
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
 None known
freeipa
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
 None known
freeipa
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
 None known
freeipa
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.10.2-14.10.2-24.10.2-2ubuntu34.11.1-14.11.1-2
 None known
freeipa
Ubuntu:25.10
 All versions, plus listed versions
4.12.2-34.12.4-1
 None known
freeipa
Ubuntu:26.10
 All versions, plus listed versions
4.13.1-14.13.1-1build1
 None known
freeipa
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.12.4-14.12.4-24.13.1-1
 None known

History

History
RecordedChangedSources
affectedOSV
affectedCVE List, NVD, OSV
factsEUVD
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-1481 is a medium vulnerability (CVSS 5.3) in Red Hat Enterprise Linux 7, published March 25, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.13%, the 66th percentile. Fixed in ipa-client 4.11.0-9.el9_4.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open