CVE-2019-14867
Code injection in FreeIPA
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
CVE-2019-14867- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-94, CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2019-0065
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
EUVD-2019-0065- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hpj-hfcr-5qwm
8.7
Code injection in FreeIPA
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
GHSA-7hpj-hfcr-5qwm- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-94, CWE-400
- Updated
- 2026-11-02
NVD
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
CVE-2019-14867- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-94, CWE-400
- Updated
- 2026-11-02
OSV
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
CVE-2019-14867- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-14867
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
DEBIAN-CVE-2019-14867- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-07
Show 8 moreShow less
OSVGHSA-7hpj-hfcr-5qwm
8.7
Code injection in FreeIPA
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
GHSA-7hpj-hfcr-5qwm- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-400, CWE-94
- Updated
- 2026-11-02
OSVPYSEC-2026-636
8.7
Code injection in FreeIPA
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
PYSEC-2026-636- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2019:4268
8.8
Red Hat Bug Fix Advisory: idm:DL1 bug fix update
- Record
RHBA-2019:4268- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:0378
8.8
Red Hat Security Advisory: ipa security and bug fix update
- Record
RHSA-2020:0378- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:1269
8.8
Red Hat Security Advisory: idm:DL1 security update
- Record
RHSA-2020:1269- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-14867
8.8
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
UBUNTU-CVE-2019-14867- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALBA-2019:4268 No score
idm:DL1 bug fix update
Bug Fix(es):
- IPA upgrade fails for latest ipa package when adtrust is installed (BZ#1773516)
- Record
ALBA-2019:4268- Updated
- 2026-11-02
OSVPYSEC-2019-28 No score
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
- Record
PYSEC-2019-28- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ipaPyPI |
4.6.2 up to 4.6.7 | 4.6.7 |
ipaPyPI |
4.7.0 up to 4.7.4 | 4.7.4 |
ipaPyPI |
4.8.0 up to 4.8.3 | 4.8.3 |
freeipaPyPI |
4.6.2 up to 4.6.7 | 4.6.7 |
freeipaPyPI |
4.7.0 up to 4.7.4 | 4.7.4 |
freeipaPyPI |
4.8.0 up to 4.8.3 | 4.8.3 |
custodiaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.6.0-3.module_el8.6.0+2881+2f24dc92 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
custodiaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.6.0-3.module_el8.5.0+2603+92118e57 | 0.6.0-3.module_el8.5.0+2603+92118e57 |
python3-custodiaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.6.0-3.module_el8.6.0+2881+2f24dc92 | 0.6.0-3.module_el8.6.0+2881+2f24dc92 |
python3-custodiaAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.6.0-3.module_el8.5.0+2603+92118e57 | 0.6.0-3.module_el8.5.0+2603+92118e57 |
Show 175 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python3-jwcryptoAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.5.0-1.module_el8.5.0+2603+92118e57 | 0.5.0-1.module_el8.5.0+2603+92118e57 |
python3-jwcryptoAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.5.0-1.module_el8.6.0+2881+2f24dc92 | 0.5.0-1.module_el8.6.0+2881+2f24dc92 |
python3-jwcryptoAlmaLinux:8 From an advisory covering 2 CVEs |
before 0.5.0-1.module_el8.6.0+2737+7e73ea90 | 0.5.0-1.module_el8.6.0+2737+7e73ea90 |
python3-pyusbAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.0-9.module_el8.5.0+2603+92118e57 | 1.0.0-9.module_el8.5.0+2603+92118e57 |
python3-pyusbAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.0-9.module_el8.6.0+2881+2f24dc92 | 1.0.0-9.module_el8.6.0+2881+2f24dc92 |
python3-pyusbAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.0.0-9.module_el8.6.0+2737+7e73ea90 | 1.0.0-9.module_el8.6.0+2737+7e73ea90 |
python3-qrcodeAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.5.0+2603+92118e57 | 5.1-12.module_el8.5.0+2603+92118e57 |
python3-qrcodeAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.6.0+2881+2f24dc92 | 5.1-12.module_el8.6.0+2881+2f24dc92 |
python3-qrcodeAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.6.0+2737+7e73ea90 | 5.1-12.module_el8.6.0+2737+7e73ea90 |
python3-qrcode-coreAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.6.0+2737+7e73ea90 | 5.1-12.module_el8.6.0+2737+7e73ea90 |
python3-qrcode-coreAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.5.0+2603+92118e57 | 5.1-12.module_el8.5.0+2603+92118e57 |
python3-qrcode-coreAlmaLinux:8 From an advisory covering 2 CVEs |
before 5.1-12.module_el8.6.0+2881+2f24dc92 | 5.1-12.module_el8.6.0+2881+2f24dc92 |
python3-yubicoAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.3.2-9.module_el8.6.0+2737+7e73ea90 | 1.3.2-9.module_el8.6.0+2737+7e73ea90 |
python3-yubicoAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.3.2-9.module_el8.6.0+2881+2f24dc92 | 1.3.2-9.module_el8.6.0+2881+2f24dc92 |
python3-yubicoAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.3.2-9.module_el8.5.0+2603+92118e57 | 1.3.2-9.module_el8.5.0+2603+92118e57 |
freeipaDebian:12 |
before 4.8.3-1 | 4.8.3-1 |
freeipaDebian:13 |
before 4.8.3-1 | 4.8.3-1 |
freeipaDebian:14 |
before 4.8.3-1 | 4.8.3-1 |
ipaPyPI |
4.6.2 up to 4.6.7, plus listed versions 4.6.34.6.44.6.5 |
4.6.7 |
ipaPyPI |
4.7.0 up to 4.7.4, plus listed versions 4.7.14.7.2 |
4.7.4 |
ipaPyPI |
4.8.0 up to 4.8.3, plus listed versions 4.8.14.8.2 |
4.8.3 |
freeipaPyPI |
4.6.2 up to 4.6.7, plus listed versions 4.6.34.6.44.6.5 |
4.6.7 |
freeipaPyPI |
4.7.0 up to 4.7.4, plus listed versions 4.7.14.7.2 |
4.7.4 |
freeipaPyPI |
4.8.0 up to 4.8.3, plus listed versions 4.8.14.8.2 |
4.8.3 |
ipaPyPI |
4.6.2 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions 4.6.34.6.44.6.54.7.14.7.24.8.14.8.2 |
4.6.74.7.44.8.3 |
freeipaPyPI |
4.6.2 up to 4.6.7, 4.7.0 up to 4.7.4, 4.8.0 up to 4.8.3, plus listed versions 4.6.34.6.44.6.54.7.14.7.24.8.14.8.2 |
4.6.74.7.44.8.3 |
bind-dyndb-ldapRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:11.1-14.module+el8.1.0+4098+f286395e | 0:11.1-14.module+el8.1.0+4098+f286395e |
bind-dyndb-ldap-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:11.1-14.module+el8.1.0+4098+f286395e | 0:11.1-14.module+el8.1.0+4098+f286395e |
bind-dyndb-ldap-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:11.1-14.module+el8.1.0+4098+f286395e | 0:11.1-14.module+el8.1.0+4098+f286395e |
custodiaRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.6.0-3.module+el8.1.0+4098+f286395e | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
ipaRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-clientRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-client-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-client-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-client-sambaRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-healthcheckRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.3-4.module+el8.1.0+4098+f286395e | 0:0.3-4.module+el8.1.0+4098+f286395e |
ipa-idoverride-memberofRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.0.4-6.module+el8.1.0+4098+f286395e | 0:0.0.4-6.module+el8.1.0+4098+f286395e |
ipa-idoverride-memberof-pluginRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.0.4-6.module+el8.1.0+4098+f286395e | 0:0.0.4-6.module+el8.1.0+4098+f286395e |
ipa-python-compatRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-serverRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-server-commonRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-server-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-server-dnsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-server-trust-adRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
ipa-server-trust-ad-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
opendnssecRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8.1.0+4098+f286395e | 0:1.4.14-1.module+el8.1.0+4098+f286395e |
opendnssec-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8.1.0+4098+f286395e | 0:1.4.14-1.module+el8.1.0+4098+f286395e |
opendnssec-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8.1.0+4098+f286395e | 0:1.4.14-1.module+el8.1.0+4098+f286395e |
python-jwcryptoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.5.0-1.module+el8.1.0+4098+f286395e | 0:0.5.0-1.module+el8.1.0+4098+f286395e |
python-kdcproxyRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4-3.module+el8.1.0+4098+f286395e | 0:0.4-3.module+el8.1.0+4098+f286395e |
python-qrcodeRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:5.1-12.module+el8.1.0+4098+f286395e | 0:5.1-12.module+el8.1.0+4098+f286395e |
python-yubicoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.3.2-9.module+el8.1.0+4098+f286395e | 0:1.3.2-9.module+el8.1.0+4098+f286395e |
python3-custodiaRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.6.0-3.module+el8.1.0+4098+f286395e | 0:0.6.0-3.module+el8.1.0+4098+f286395e |
python3-ipaclientRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
python3-ipalibRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
python3-ipaserverRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:4.8.0-13.module+el8.1.0+4923+c6efe041 | 0:4.8.0-13.module+el8.1.0+4923+c6efe041 |
python3-jwcryptoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.5.0-1.module+el8.1.0+4098+f286395e | 0:0.5.0-1.module+el8.1.0+4098+f286395e |
python3-kdcproxyRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.4-3.module+el8.1.0+4098+f286395e | 0:0.4-3.module+el8.1.0+4098+f286395e |
python3-pyusbRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-9.module+el8.1.0+4098+f286395e | 0:1.0.0-9.module+el8.1.0+4098+f286395e |
python3-qrcodeRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:5.1-12.module+el8.1.0+4098+f286395e | 0:5.1-12.module+el8.1.0+4098+f286395e |
python3-qrcode-coreRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:5.1-12.module+el8.1.0+4098+f286395e | 0:5.1-12.module+el8.1.0+4098+f286395e |
python3-yubicoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.3.2-9.module+el8.1.0+4098+f286395e | 0:1.3.2-9.module+el8.1.0+4098+f286395e |
pyusbRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-9.module+el8.1.0+4098+f286395e | 0:1.0.0-9.module+el8.1.0+4098+f286395e |
slapi-nisRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.56.3-2.module+el8.1.0+4098+f286395e | 0:0.56.3-2.module+el8.1.0+4098+f286395e |
slapi-nis-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.56.3-2.module+el8.1.0+4098+f286395e | 0:0.56.3-2.module+el8.1.0+4098+f286395e |
slapi-nis-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:0.56.3-2.module+el8.1.0+4098+f286395e | 0:0.56.3-2.module+el8.1.0+4098+f286395e |
softhsmRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8.1.0+4098+f286395e | 0:2.4.0-2.module+el8.1.0+4098+f286395e |
softhsm-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8.1.0+4098+f286395e | 0:2.4.0-2.module+el8.1.0+4098+f286395e |
softhsm-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8.1.0+4098+f286395e | 0:2.4.0-2.module+el8.1.0+4098+f286395e |
softhsm-develRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8.1.0+4098+f286395e | 0:2.4.0-2.module+el8.1.0+4098+f286395e |
ipaRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-clientRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-client-commonRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-commonRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-python-compatRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaclientRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipalibRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-serverRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-commonRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-dnsRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-trust-adRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaserverRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipaRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-clientRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-client-commonRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-commonRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-debuginfoRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-python-compatRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaclientRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipalibRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-serverRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-commonRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-dnsRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-trust-adRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaserverRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipaRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-clientRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-client-commonRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-commonRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-python-compatRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-serverRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-commonRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-dnsRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-trust-adRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaclientRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipalibRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaserverRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipaRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-clientRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-client-commonRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-commonRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-python-compatRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-serverRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-commonRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-dnsRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
ipa-server-trust-adRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaclientRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipalibRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
python2-ipaserverRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:4.6.5-11.el7_7.4 | 0:4.6.5-11.el7_7.4 |
bind-dyndb-ldapRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:11.1-13.module+el8+2555+b334d87b | 0:11.1-13.module+el8+2555+b334d87b |
bind-dyndb-ldap-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:11.1-13.module+el8+2555+b334d87b | 0:11.1-13.module+el8+2555+b334d87b |
bind-dyndb-ldap-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:11.1-13.module+el8+2555+b334d87b | 0:11.1-13.module+el8+2555+b334d87b |
custodiaRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.6.0-2.module+el8+2555+b334d87b | 0:0.6.0-2.module+el8+2555+b334d87b |
ipaRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-clientRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-client-commonRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-client-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-commonRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-idoverride-memberofRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.0.4-6.module+el8+2555+b334d87b | 0:0.0.4-6.module+el8+2555+b334d87b |
ipa-idoverride-memberof-pluginRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.0.4-6.module+el8+2555+b334d87b | 0:0.0.4-6.module+el8+2555+b334d87b |
ipa-python-compatRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-serverRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-server-commonRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-server-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-server-dnsRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-server-trust-adRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
ipa-server-trust-ad-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
opendnssecRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8+2555+b334d87b | 0:1.4.14-1.module+el8+2555+b334d87b |
opendnssec-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8+2555+b334d87b | 0:1.4.14-1.module+el8+2555+b334d87b |
opendnssec-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.4.14-1.module+el8+2555+b334d87b | 0:1.4.14-1.module+el8+2555+b334d87b |
python-jwcryptoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.5.0-1.module+el8+2555+b334d87b | 0:0.5.0-1.module+el8+2555+b334d87b |
python-kdcproxyRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.4-3.module+el8+2555+b334d87b | 0:0.4-3.module+el8+2555+b334d87b |
python-qrcodeRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:5.1-11.module+el8+2555+b334d87b | 0:5.1-11.module+el8+2555+b334d87b |
python-yubicoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.3.2-9.module+el8+2555+b334d87b | 0:1.3.2-9.module+el8+2555+b334d87b |
python3-custodiaRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.6.0-2.module+el8+2555+b334d87b | 0:0.6.0-2.module+el8+2555+b334d87b |
python3-ipaclientRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
python3-ipalibRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
python3-ipaserverRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:4.7.1-12.module+el8.0.0+5776+863ecd37 | 0:4.7.1-12.module+el8.0.0+5776+863ecd37 |
python3-jwcryptoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.5.0-1.module+el8+2555+b334d87b | 0:0.5.0-1.module+el8+2555+b334d87b |
python3-kdcproxyRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.4-3.module+el8+2555+b334d87b | 0:0.4-3.module+el8+2555+b334d87b |
python3-pyusbRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-9.module+el8+2555+b334d87b | 0:1.0.0-9.module+el8+2555+b334d87b |
python3-qrcodeRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:5.1-11.module+el8+2555+b334d87b | 0:5.1-11.module+el8+2555+b334d87b |
python3-qrcode-coreRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:5.1-11.module+el8+2555+b334d87b | 0:5.1-11.module+el8+2555+b334d87b |
python3-yubicoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.3.2-9.module+el8+2555+b334d87b | 0:1.3.2-9.module+el8+2555+b334d87b |
pyusbRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:1.0.0-9.module+el8+2555+b334d87b | 0:1.0.0-9.module+el8+2555+b334d87b |
slapi-nisRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.56.2-7.module+el8+2555+b334d87b | 0:0.56.2-7.module+el8+2555+b334d87b |
slapi-nis-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.56.2-7.module+el8+2555+b334d87b | 0:0.56.2-7.module+el8+2555+b334d87b |
slapi-nis-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:0.56.2-7.module+el8+2555+b334d87b | 0:0.56.2-7.module+el8+2555+b334d87b |
softhsmRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8+2555+b334d87b | 0:2.4.0-2.module+el8+2555+b334d87b |
softhsm-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8+2555+b334d87b | 0:2.4.0-2.module+el8+2555+b334d87b |
softhsm-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8+2555+b334d87b | 0:2.4.0-2.module+el8+2555+b334d87b |
softhsm-develRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:2.4.0-2.module+el8+2555+b334d87b | 0:2.4.0-2.module+el8+2555+b334d87b |
freeipaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 3.2.1-0ubuntu13.3.4-0ubuntu13.3.4-0ubuntu23.3.4-0ubuntu33.3.4-0ubuntu3.13.3.4-0ubuntu3.1+esm1 |
None known |
freeipaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 4.1.4-14.3.1-0ubuntu14.3.1-0ubuntu1+esm1 |
None known |
freeipaUbuntu:18.04:LTS |
All versions, plus listed versions 4.4.4-3ubuntu14.4.4-44.7.0~pre1+git20180411-2ubuntu14.7.0~pre1+git20180411-2ubuntu2 |
None known |
freeipaUbuntu:20.04:LTS |
All versions, plus listed versions 4.8.1-2ubuntu14.8.3-14.8.6-1ubuntu2 |
None known |
freeipaUbuntu:22.04:LTS |
All versions, plus listed versions 4.8.6-1ubuntu64.8.6-1ubuntu84.8.6-1ubuntu94.9.8-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14867 is a high vulnerability (CVSS 8.8) in Freeipa, published November 27, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.41%, the 94th percentile. Fixed in ipa 4.6.7.
References
freeipa.org/page/Releases/4.7.4
freeipa.org/page/Releases/4.8.3
freeipa.org/page/Releases/4.6.7
bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF
Show 30 moreShow less
access.redhat.com/errata/RHSA-2020:0378
access.redhat.com/errata/RHBA-2019:4268
nvd.nist.gov/vuln/detail/CVE-2019-14867
github.com/pypa/advisory-db/tree/main/vulns/ipa/PYSEC-2019-28.yaml
github.com/advisories/GHSA-7hpj-hfcr-5qwm
github.com/pypa/advisory-database/tree/main/vulns/ipa/PYSEC-2019-28.yaml
lists.fedoraproject.org/archives/list/[email protected]/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF
lists.fedoraproject.org/archives/list/[email protected]/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T
errata.almalinux.org/8/ALBA-2019-4268.html
vulners.com/cve/CVE-2019-10195
vulners.com/cve/CVE-2019-14867
security-tracker.debian.org/tracker/CVE-2019-14867
pypi.org/project/freeipa
bugzilla.redhat.com/show_bug.cgi?id=1773516
security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_4268.json
access.redhat.com/security/cve/CVE-2019-10195
bugzilla.redhat.com/show_bug.cgi?id=1726223
cve.org/CVERecord?id=CVE-2019-10195
nvd.nist.gov/vuln/detail/CVE-2019-10195
access.redhat.com/security/cve/CVE-2019-14867
bugzilla.redhat.com/show_bug.cgi?id=1766920
cve.org/CVERecord?id=CVE-2019-14867
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1770728
bugzilla.redhat.com/show_bug.cgi?id=1781153
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0378.json
access.redhat.com/errata/RHSA-2020:1269
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1269.json
ubuntu.com/security/CVE-2019-14867
pagure.io/freeipa/c/4abd2f76d76c4c1a1ec5087ec447f4515b63c2c6