Every CVE Search/ Get API key

CVE-2024-2698

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

8.8 HighFix available

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.67%Up 0.6 points since Jun 13, 2024
90%50%10%1%

What each source reports

CVE List Score used 8.8

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
CVE-2024-2698
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-07
EUVDEUVD-2024-27644 8.8

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
EUVD-2024-27644
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
GitHub AdvisoriesGHSA-jhc8-v2x5-jvj5 7.1

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos...

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
GHSA-jhc8-v2x5-jvj5
CVSS 3.1
7.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Weakness
CWE-284, CWE-863
Updated
2026-11-02
NVD 8.8

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
CVE-2024-2698
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-07
OSV 8.8

Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request.

In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
CVE-2024-2698
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-08
OSVDEBIAN-CVE-2024-2698 8.8

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
DEBIAN-CVE-2024-2698
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-07
Show 9 moreShow less
OSVRHSA-2024:3754 8.8

Red Hat Security Advisory: ipa security update

Record
RHSA-2024:3754
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3755 8.8

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2024:3755
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3757 8.8

Red Hat Security Advisory: ipa security update

Record
RHSA-2024:3757
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3759 8.8

Red Hat Security Advisory: idm:DL1 security update

Record
RHSA-2024:3759
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-2698 8.8

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Record
UBUNTU-CVE-2024-2698
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:3754 No score

Important: ipa security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)
  • freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3754
Updated
2026-11-02
OSVALSA-2024:3755 No score

Important: idm:DL1 security update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service
  • CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3755
Updated
2026-11-02
OSVRLSA-2024:3754 No score

Important: ipa security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • freeipa: delegation rules allow a proxy service to impersonate any user to access another target service (CVE-2024-2698)

  • freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force (CVE-2024-3183)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3754
Updated
2026-11-02
OSVRLSA-2024:3755 No score

Important: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

  • CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

  • CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3755
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ipa-client
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-client-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-client-epn
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-client-samba
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-selinux
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-server-common
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-server-dns
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
ipa-server-trust-ad
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
Show 200 moreShow less
Affected packages
PackageAffectedFixed
python3-ipaclient
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
python3-ipalib
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
python3-ipaserver
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
python3-ipatests
AlmaLinux:9
From an advisory covering 2 CVEs
 before 4.11.0-15.el9_4.alma.1
4.11.0-15.el9_4.alma.1
bind-dyndb-ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 11.6-5.module_el8.10.0+3844+20e075e5.alma.2
11.6-5.module_el8.10.0+3844+20e075e5.alma.2
custodia
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
ipa-client
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-client-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-client-epn
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-client-samba
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-healthcheck
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.12-3.module_el8.9.0+3651+d05ea4c5
0.12-3.module_el8.9.0+3651+d05ea4c5
ipa-healthcheck-core
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.12-3.module_el8.9.0+3651+d05ea4c5
0.12-3.module_el8.9.0+3651+d05ea4c5
ipa-python-compat
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-selinux
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-server
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-server-common
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-server-dns
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
ipa-server-trust-ad
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
opendnssec
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.7-1.module_el8.6.0+2881+2f24dc92
2.1.7-1.module_el8.6.0+2881+2f24dc92
opendnssec
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.1.7-1.module_el8.6.0+3031+2f24dc92
2.1.7-1.module_el8.6.0+3031+2f24dc92
python3-custodia
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.6.0-3.module_el8.6.0+2881+2f24dc92
0.6.0-3.module_el8.6.0+2881+2f24dc92
python3-ipaclient
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
python3-ipalib
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
python3-ipaserver
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
python3-ipatests
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.9.13-10.module_el8.10.0+3857+9c8da539
4.9.13-10.module_el8.10.0+3857+9c8da539
python3-jwcrypto
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.5.0-2.module_el8.10.0+3844+20e075e5
0.5.0-2.module_el8.10.0+3844+20e075e5
python3-kdcproxy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.4-5.module_el8.9.0+3785+2238a12a
0.4-5.module_el8.9.0+3785+2238a12a
python3-pyusb
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.0.0-9.1.module_el8.7.0+3349+cfeff52e
1.0.0-9.1.module_el8.7.0+3349+cfeff52e
python3-qrcode
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-qrcode-core
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.1-12.module_el8.6.0+2881+2f24dc92
5.1-12.module_el8.6.0+2881+2f24dc92
python3-yubico
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.3.2-9.1.module_el8.7.0+3349+cfeff52e
1.3.2-9.1.module_el8.7.0+3349+cfeff52e
slapi-nis
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1
0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1
softhsm
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.6.0-5.module_el8.6.0+3031+2f24dc92
2.6.0-5.module_el8.6.0+3031+2f24dc92
softhsm-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.6.0-5.module_el8.6.0+2881+2f24dc92
2.6.0-5.module_el8.6.0+2881+2f24dc92
softhsm-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.6.0-5.module_el8.6.0+3031+2f24dc92
2.6.0-5.module_el8.6.0+3031+2f24dc92
freeipa
Debian:12
 All versions, plus listed versions
4.10.1+dfsg1-1+exp14.10.1-1+exp14.10.2-14.10.2-24.10.2-2+exp1
Show 14 moreShow less
4.11.1-14.11.1-1+exp14.11.1-24.11.1-2+exp14.11.1-2.14.12.2-14.12.2-24.12.2-34.12.4-14.12.4-24.13.1-14.9.11-14.9.11-1+exp14.9.11-2
 None known
freeipa
Debian:13
 before 4.12.2-1
4.12.2-1
freeipa
Debian:14
 before 4.12.2-1
4.12.2-1
ipa
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-client
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-client-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-client-epn
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-client-samba
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-selinux
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server-common
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server-dns
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server-trust-ad
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
python3-ipaclient
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
python3-ipalib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
python3-ipaserver
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
python3-ipatests
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
bind-dyndb-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-5.module+el8.10.0+21691+df63127d
0:11.6-5.module+el8.10.0+21691+df63127d
bind-dyndb-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-5.module+el8.10.0+21691+df63127d
0:11.6-5.module+el8.10.0+21691+df63127d
bind-dyndb-ldap-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-5.module+el8.10.0+21691+df63127d
0:11.6-5.module+el8.10.0+21691+df63127d
custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
ipa
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-client
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-client-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-client-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-client-epn
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-client-samba
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-healthcheck
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.12-3.module+el8.9.0+19634+c162f948
0:0.12-3.module+el8.9.0+19634+c162f948
ipa-healthcheck-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.12-3.module+el8.9.0+19634+c162f948
0:0.12-3.module+el8.9.0+19634+c162f948
ipa-python-compat
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server-dns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server-trust-ad
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
ipa-server-trust-ad-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
opendnssec
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
opendnssec-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
opendnssec-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.9.0+18911+94941f82
0:2.1.7-1.module+el8.9.0+18911+94941f82
python-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.5.0-2.module+el8.10.0+21691+df63127d
0:0.5.0-2.module+el8.10.0+21691+df63127d
python-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4-5.module+el8.9.0+18911+94941f82
0:0.4-5.module+el8.9.0+18911+94941f82
python-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.9.0+18911+94941f82
0:5.1-12.module+el8.9.0+18911+94941f82
python-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.2-9.1.module+el8.9.0+18911+94941f82
0:1.3.2-9.1.module+el8.9.0+18911+94941f82
python3-custodia
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.6.0-3.module+el8.9.0+18911+94941f82
0:0.6.0-3.module+el8.9.0+18911+94941f82
python3-ipaclient
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
python3-ipalib
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
python3-ipaserver
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
python3-ipatests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+21944+3943ad77
0:4.9.13-10.module+el8.10.0+21944+3943ad77
python3-jwcrypto
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.5.0-2.module+el8.10.0+21691+df63127d
0:0.5.0-2.module+el8.10.0+21691+df63127d
python3-kdcproxy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.4-5.module+el8.9.0+18911+94941f82
0:0.4-5.module+el8.9.0+18911+94941f82
python3-pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-9.1.module+el8.9.0+18911+94941f82
0:1.0.0-9.1.module+el8.9.0+18911+94941f82
python3-qrcode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.9.0+18911+94941f82
0:5.1-12.module+el8.9.0+18911+94941f82
python3-qrcode-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.9.0+18911+94941f82
0:5.1-12.module+el8.9.0+18911+94941f82
python3-yubico
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.2-9.1.module+el8.9.0+18911+94941f82
0:1.3.2-9.1.module+el8.9.0+18911+94941f82
pyusb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-9.1.module+el8.9.0+18911+94941f82
0:1.0.0-9.1.module+el8.9.0+18911+94941f82
slapi-nis
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
slapi-nis-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.10.0+20723+03062ebd
0:0.60.0-4.module+el8.10.0+20723+03062ebd
softhsm
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
softhsm-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.9.0+18911+94941f82
0:2.6.0-5.module+el8.9.0+18911+94941f82
ipa
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-client
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-client-common
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-client-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-client-epn
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-client-samba
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-common
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-selinux
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server-common
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server-dns
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server-trust-ad
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
ipa-server-trust-ad-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
python3-ipaclient
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
python3-ipalib
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
python3-ipaserver
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
python3-ipatests
Red Hat:rhel_eus:9.2::crb
From an advisory covering 2 CVEs
 before 0:4.10.1-12.el9_2.2
0:4.10.1-12.el9_2.2
bind-dyndb-ldap
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
bind-dyndb-ldap-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
bind-dyndb-ldap-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:11.6-4.module+el8.8.0+21675+157fa23b.2
0:11.6-4.module+el8.8.0+21675+157fa23b.2
custodia
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-client
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-client-common
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-client-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-client-epn
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-client-samba
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-common
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-healthcheck
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.12-1.module+el8.8.0+17582+6bf5bf91
0:0.12-1.module+el8.8.0+17582+6bf5bf91
ipa-healthcheck-core
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.12-1.module+el8.8.0+17582+6bf5bf91
0:0.12-1.module+el8.8.0+17582+6bf5bf91
ipa-python-compat
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-selinux
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server-common
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server-dns
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server-trust-ad
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
ipa-server-trust-ad-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
opendnssec
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
opendnssec-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
opendnssec-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.4.0+9007+5084bdd8
0:2.1.7-1.module+el8.4.0+9007+5084bdd8
python-jwcrypto
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.5.0-1.1.module+el8.7.0+15842+306cbc83
0:0.5.0-1.1.module+el8.7.0+15842+306cbc83
python-kdcproxy
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python-qrcode
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python-yubico
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
python3-custodia
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.6.0-3.module+el8.1.0+4098+f286395e
0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
python3-ipalib
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
python3-ipaserver
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
python3-ipatests
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
0:4.9.11-11.module+el8.8.0+21953+5e839de2.1
python3-jwcrypto
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.5.0-1.1.module+el8.7.0+15842+306cbc83
0:0.5.0-1.1.module+el8.7.0+15842+306cbc83
python3-kdcproxy
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.4-5.module+el8.2.0+4691+a05b2456
0:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusb
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
python3-qrcode
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-qrcode-core
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.1.0+4098+f286395e
0:5.1-12.module+el8.1.0+4098+f286395e
python3-yubico
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.3.2-9.1.module+el8.7.0+15691+2b2c1dd5
pyusb
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
0:1.0.0-9.1.module+el8.7.0+15691+2b2c1dd5
slapi-nis
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.8.0+20635+330e3683
0:0.60.0-4.module+el8.8.0+20635+330e3683
slapi-nis-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.8.0+20635+330e3683
0:0.60.0-4.module+el8.8.0+20635+330e3683
slapi-nis-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.8.0+20635+330e3683
0:0.60.0-4.module+el8.8.0+20635+330e3683
softhsm
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.4.0+10227+076cd560
0:2.6.0-5.module+el8.4.0+10227+076cd560
softhsm-debuginfo
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.4.0+10227+076cd560
0:2.6.0-5.module+el8.4.0+10227+076cd560
softhsm-debugsource
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.4.0+10227+076cd560
0:2.6.0-5.module+el8.4.0+10227+076cd560
softhsm-devel
Red Hat:rhel_eus:8.8::appstream
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.4.0+10227+076cd560
0:2.6.0-5.module+el8.4.0+10227+076cd560
ipa
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:4.11.0-15.el9_4
0:4.11.0-15.el9_4
bind-dyndb-ldap
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:11.6-5.module+el8.10.0+1819+0aeba2f1
0:11.6-5.module+el8.10.0+1819+0aeba2f1
custodia
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
0:0.6.0-3.module+el8.9.0+1371+ffa84eb9
ipa
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.9.13-10.module+el8.10.0+1828+d0e644b0
0:4.9.13-10.module+el8.10.0+1828+d0e644b0
ipa-healthcheck
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-3.module+el8.9.0+1433+5bd2f890
0:0.12-3.module+el8.9.0+1433+5bd2f890
opendnssec
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.1.7-1.module+el8.9.0+1371+ffa84eb9
0:2.1.7-1.module+el8.9.0+1371+ffa84eb9
python-jwcrypto
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
0:0.5.0-2.module+el8.10.0+1818+2dfda7a6
python-kdcproxy
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.4-5.module+el8.9.0+1371+ffa84eb9
0:0.4-5.module+el8.9.0+1371+ffa84eb9
python-qrcode
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:5.1-12.module+el8.9.0+1371+ffa84eb9
0:5.1-12.module+el8.9.0+1371+ffa84eb9
python-yubico
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9
pyusb
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9
slapi-nis
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.60.0-4.module+el8.9.0+1573+39ab85f4
0:0.60.0-4.module+el8.9.0+1573+39ab85f4
softhsm
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
0:2.6.0-5.module+el8.9.0+1371+ffa84eb9
freeipa
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1
 None known
freeipa
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1
 None known
freeipa
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2
 None known
freeipa
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2
 None known
freeipa
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1
 None known
freeipa
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.10.2-14.10.2-24.10.2-2ubuntu34.11.1-14.11.1-2
 None known
freeipa
Ubuntu:25.10
 All versions, plus listed versions
4.12.2-34.12.4-1
 None known
freeipa
Ubuntu:26.10
 All versions, plus listed versions
4.13.1-14.13.1-1build1
 None known
freeipa
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.12.4-14.12.4-24.13.1-1
 None known

History

History
RecordedChangedSources
affectedOSV
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-2698 is a high vulnerability (CVSS 8.8) in Freeipa, published June 10, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.67%, the 52nd percentile. Fixed in freeipa 4.12.2-1.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open