{"id":"CVE-2019-14867","aliases":["ALBA-2019:4268","DEBIAN-CVE-2019-14867","EUVD-2019-0065","GHSA-7hpj-hfcr-5qwm","PYSEC-2019-28","PYSEC-2026-636","RHBA-2019:4268","RHSA-2020:0378","RHSA-2020:1269","UBUNTU-CVE-2019-14867"],"status":"published","title":"Code injection in FreeIPA","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.07413,"percentile":0.94479,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-94"],"published":"2019-11-27T08:05:17Z","modified":"2026-11-07T11:00:04Z","fixes":[{"ecosystem":"PyPI","package":"ipa","fixed_in":["4.6.7","4.7.4","4.8.3"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"freeipa","fixed_in":["4.6.7","4.7.4","4.8.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"freeipa","fixed_in":["4.8.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freeipa","fixed_in":["4.8.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freeipa","fixed_in":["4.8.3-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0"},{"fixed":"4.7.4"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0"},{"fixed":"4.7.4"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.6.0+2737+7e73ea90"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.6.0+2737+7e73ea90"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2737+7e73ea90"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2737+7e73ea90"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.6.0+2737+7e73ea90"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.6.0+2881+2f24dc92"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.5.0+2603+92118e57"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"}]}],"versions":["4.6.2","4.6.3","4.6.4","4.6.5"]},{"source":"osv","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0"},{"fixed":"4.7.4"}]}],"versions":["4.7.0","4.7.1","4.7.2"]},{"source":"osv","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}],"versions":["4.8.0","4.8.1","4.8.2"]},{"source":"osv","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"}]}],"versions":["4.6.2","4.6.3","4.6.4","4.6.5"]},{"source":"osv","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0"},{"fixed":"4.7.4"}]}],"versions":["4.7.0","4.7.1","4.7.2"]},{"source":"osv","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}],"versions":["4.8.0","4.8.1","4.8.2"]},{"source":"osv","ecosystem":"PyPI","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"},{"introduced":"4.7.0"},{"fixed":"4.7.4"},{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}],"versions":["4.6.2","4.6.3","4.6.4","4.6.5","4.7.0","4.7.1","4.7.2","4.8.0","4.8.1","4.8.2"]},{"source":"osv","ecosystem":"PyPI","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.6.2"},{"fixed":"4.6.7"},{"introduced":"4.7.0"},{"fixed":"4.7.4"},{"introduced":"4.8.0"},{"fixed":"4.8.3"}]}],"versions":["4.6.2","4.6.3","4.6.4","4.6.5","4.7.0","4.7.1","4.7.2","4.8.0","4.8.1","4.8.2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-14.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-14.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-14.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3-4.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-idoverride-memberof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-6.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-idoverride-memberof-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-6.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-13.module+el8.1.0+4923+c6efe041"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-3.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.3-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.3-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.3-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8.1.0+4098+f286395e"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.5-11.el7_7.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-13.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-13.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.1-13.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-idoverride-memberof","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-6.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-idoverride-memberof-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-6.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.14-1.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-3.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-11.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-12.module+el8.0.0+5776+863ecd37"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-3.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-11.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-11.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.2-7.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.2-7.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.2-7.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-2.module+el8+2555+b334d87b"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.1-0ubuntu1","3.3.4-0ubuntu1","3.3.4-0ubuntu2","3.3.4-0ubuntu3","3.3.4-0ubuntu3.1","3.3.4-0ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.4-1","4.3.1-0ubuntu1","4.3.1-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.4-3ubuntu1","4.4.4-4","4.7.0~pre1+git20180411-2ubuntu1","4.7.0~pre1+git20180411-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-2ubuntu1","4.8.3-1","4.8.6-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.6-1ubuntu6","4.8.6-1ubuntu8","4.8.6-1ubuntu9","4.9.8-1"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freeipa","product":"freeipa"},{"vendor":"red hat","product":"ipa"}],"references":[{"url":"https://www.freeipa.org/page/Releases/4.7.4","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory","web","article","report"]},{"url":"https://www.freeipa.org/page/Releases/4.8.3","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory","web","article","report"]},{"url":"https://www.freeipa.org/page/Releases/4.6.7","tags":["x_refsource_MISC","x_transferred","Release Notes","advisory","web","article","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0378","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHBA-2019:4268","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14867","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-db/tree/main/vulns/ipa/PYSEC-2019-28.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7hpj-hfcr-5qwm","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/ipa/PYSEC-2019-28.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T","tags":["web"]},{"url":"https://errata.almalinux.org/8/ALBA-2019-4268.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2019-10195","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-14867","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14867","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/","tags":["web"]},{"url":"https://pypi.org/project/freeipa","tags":["package"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1773516","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_4268.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-10195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1726223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-10195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-10195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766920","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14867","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1781153","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0378.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1269","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1269.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-14867","tags":["report"]},{"url":"https://pagure.io/freeipa/c/4abd2f76d76c4c1a1ec5087ec447f4515b63c2c6","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-14867","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T08:05:17Z","modified":"2024-08-05T00:26:39.117Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94","CWE-400"],"updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-0065","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T08:05:17Z","modified":"2024-08-05T00:26:39Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:40:38.622868Z"}],"ghsa":[{"id":"GHSA-7hpj-hfcr-5qwm","title":"Code injection in FreeIPA","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2021-12-06T18:17:38Z","modified":"2024-09-20T21:57:41Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94","CWE-400"],"updated_at":"2026-11-02T14:38:05.526697Z"}],"nvd":[{"id":"CVE-2019-14867","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T09:15:10.967Z","modified":"2026-06-17T02:19:12.223Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-94","CWE-400"],"updated_at":"2026-11-02T14:05:38.993437Z"}],"osv":[{"id":"CVE-2019-14867","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T09:15:10.967Z","modified":"2026-10-29T11:12:06.198841773Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-14867","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T09:15:10.967Z","modified":"2026-11-07T11:00:04.090745651Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-07T11:15:14.449016Z"},{"id":"GHSA-7hpj-hfcr-5qwm","title":"Code injection in FreeIPA","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2021-12-06T18:17:38Z","modified":"2026-07-06T08:11:04.645383601Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400","CWE-94"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"PYSEC-2026-636","title":"Code injection in FreeIPA","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2026-07-02T14:13:14.030552Z","modified":"2026-07-06T08:11:04.645383601Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:57.671918Z"},{"id":"RHBA-2019:4268","title":"Red Hat Bug Fix Advisory: idm:DL1 bug fix update","status":"published","published":"2024-09-16T03:18:07Z","modified":"2026-02-21T10:02:40Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:0378","title":"Red Hat Security Advisory: ipa security and bug fix update","status":"published","published":"2024-09-16T03:17:59Z","modified":"2026-06-26T12:21:57.524480523Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1269","title":"Red Hat Security Advisory: idm:DL1 security update","status":"published","published":"2024-09-16T03:18:14Z","modified":"2026-02-21T10:04:18Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-14867","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T09:15:00Z","modified":"2025-10-24T04:47:46Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"ALBA-2019:4268","title":"idm:DL1 bug fix update","description":"Bug Fix(es):\n\n* IPA upgrade fails for latest ipa package when adtrust is installed (BZ#1773516)","status":"published","published":"2019-12-17T09:19:15Z","modified":"2026-10-29T11:00:40.332991992Z","updated_at":"2026-11-02T15:27:45.586651Z"},{"id":"PYSEC-2019-28","description":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.","status":"published","published":"2019-11-27T09:15:00Z","modified":"2026-07-06T08:11:04.645383601Z","updated_at":"2026-11-02T15:52:52.192131Z"}]}}