{"id":"CVE-2020-1722","aliases":["ALSA-2020:4670","DEBIAN-CVE-2020-1722","EUVD-2020-12573","GHSA-mvj3-pw74-8w47","RHSA-2020:3936","RHSA-2020:4670","RLSA-2020:4670","UBUNTU-CVE-2020-1722"],"status":"published","title":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1...","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01073,"percentile":0.65158,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2020-04-27T20:46:52Z","modified":"2026-11-07T11:00:04Z","fixes":[{"ecosystem":"Debian:12","package":"freeipa","fixed_in":["4.8.8-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freeipa","fixed_in":["4.8.8-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freeipa","fixed_in":["4.8.8-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.5.0+2641+983b221b"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-1.module_el8.6.0+2737+7e73ea90"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4-5.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.5.0+2641+983b221b"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.module_el8.6.0+2737+7e73ea90"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.5.0+2641+983b221b"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2737+7e73ea90"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2737+7e73ea90"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1-12.module_el8.5.0+2641+983b221b"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.5.0+2641+983b221b"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.6.0+2737+7e73ea90"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-9.module_el8.6.0+2881+2f24dc92"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.8-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.8-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.8-2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.8-5.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3-1.module+el8.3.0+6993+104f8db0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3-1.module+el8.3.0+6993+104f8db0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.3-1.module+el8.3.0+6993+104f8db0"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-epn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-client-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-6.module+el8.3.0+7711+c4441980"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-healthcheck-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-6.module+el8.3.0+7711+c4441980"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ipa-server-trust-ad-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.6-2.module+el8.3.0+6580+328a3362"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.6-2.module+el8.3.0+6580+328a3362"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"opendnssec-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.6-2.module+el8.3.0+6580+328a3362"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.1.0+4098+f286395e"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8223+6212645f"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.7-12.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.2.0+4691+a05b2456"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-qrcode-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.1.0+4107+4a66eb87"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.5-4.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.5-4.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"slapi-nis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.56.5-4.module+el8.3.0+8222+c1bff54a"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-3.module+el8.3.0+6909+fb33717d"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-3.module+el8.3.0+6909+fb33717d"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-3.module+el8.3.0+6909+fb33717d"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"softhsm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-3.module+el8.3.0+6909+fb33717d"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"custodia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-3.module+el8.4.0+429+6bd33fea"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.module+el8.4.0+429+6bd33fea"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-jwcrypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-kdcproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-5.module+el8.3.0+244+0b2ae752"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-qrcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1-12.module+el8.4.0+429+6bd33fea"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.module+el8.4.0+429+6bd33fea"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python-yubico","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.module+el8.4.0+429+6bd33fea"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pyusb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.1-0ubuntu1","3.3.4-0ubuntu1","3.3.4-0ubuntu2","3.3.4-0ubuntu3","3.3.4-0ubuntu3.1","3.3.4-0ubuntu3.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.4-1","4.3.1-0ubuntu1","4.3.1-0ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.4-3ubuntu1","4.4.4-4","4.7.0~pre1+git20180411-2ubuntu1","4.7.0~pre1+git20180411-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.1-2ubuntu1","4.8.3-1","4.8.6-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.6-1ubuntu6","4.8.6-1ubuntu8","4.8.6-1ubuntu9","4.9.8-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.2-1","4.10.2-2","4.10.2-2ubuntu3","4.11.1-1","4.11.1-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.2-3","4.12.4-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.13.1-1","4.13.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"freeipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.12.4-1","4.12.4-2","4.13.1-1"]}],"products":[{"vendor":"freeipa","product":"freeipa"},{"vendor":"red hat","product":"ipa"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1722","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1722","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3936","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4670","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-1722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793071","tags":["report"]},{"url":"https://github.com/advisories/GHSA-mvj3-pw74-8w47"},{"url":"https://bugzilla.redhat.com/1399546","tags":["report"]},{"url":"https://bugzilla.redhat.com/1430365","tags":["report"]},{"url":"https://bugzilla.redhat.com/1488732","tags":["report"]},{"url":"https://bugzilla.redhat.com/1585020","tags":["report"]},{"url":"https://bugzilla.redhat.com/1601614","tags":["report"]},{"url":"https://bugzilla.redhat.com/1601617","tags":["report"]},{"url":"https://bugzilla.redhat.com/1651577","tags":["report"]},{"url":"https://bugzilla.redhat.com/1668082","tags":["report"]},{"url":"https://bugzilla.redhat.com/1668089","tags":["report"]},{"url":"https://bugzilla.redhat.com/1668097","tags":["report"]},{"url":"https://bugzilla.redhat.com/1686454","tags":["report"]},{"url":"https://bugzilla.redhat.com/1701233","tags":["report"]},{"url":"https://bugzilla.redhat.com/1701972","tags":["report"]},{"url":"https://bugzilla.redhat.com/1746830","tags":["report"]},{"url":"https://bugzilla.redhat.com/1750893","tags":["report"]},{"url":"https://bugzilla.redhat.com/1751295","tags":["report"]},{"url":"https://bugzilla.redhat.com/1757045","tags":["report"]},{"url":"https://bugzilla.redhat.com/1759888","tags":["report"]},{"url":"https://bugzilla.redhat.com/1768156","tags":["report"]},{"url":"https://bugzilla.redhat.com/1777806","tags":["report"]},{"url":"https://bugzilla.redhat.com/1793071","tags":["report"]},{"url":"https://bugzilla.redhat.com/1801698","tags":["report"]},{"url":"https://bugzilla.redhat.com/1802471","tags":["report"]},{"url":"https://bugzilla.redhat.com/1809835","tags":["report"]},{"url":"https://bugzilla.redhat.com/1810154","tags":["report"]},{"url":"https://bugzilla.redhat.com/1810179","tags":["report"]},{"url":"https://bugzilla.redhat.com/1813330","tags":["report"]},{"url":"https://bugzilla.redhat.com/1816784","tags":["report"]},{"url":"https://bugzilla.redhat.com/1818765","tags":["report"]},{"url":"https://bugzilla.redhat.com/1818877","tags":["report"]},{"url":"https://bugzilla.redhat.com/1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/1831732","tags":["report"]},{"url":"https://bugzilla.redhat.com/1831935","tags":["report"]},{"url":"https://bugzilla.redhat.com/1832331","tags":["report"]},{"url":"https://bugzilla.redhat.com/1833266","tags":["report"]},{"url":"https://bugzilla.redhat.com/1834264","tags":["report"]},{"url":"https://bugzilla.redhat.com/1834909","tags":["report"]},{"url":"https://bugzilla.redhat.com/1845211","tags":["report"]},{"url":"https://bugzilla.redhat.com/1845537","tags":["report"]},{"url":"https://bugzilla.redhat.com/1845596","tags":["report"]},{"url":"https://bugzilla.redhat.com/1846352","tags":["report"]},{"url":"https://bugzilla.redhat.com/1846434","tags":["report"]},{"url":"https://bugzilla.redhat.com/1847999","tags":["report"]},{"url":"https://bugzilla.redhat.com/1849914","tags":["report"]},{"url":"https://bugzilla.redhat.com/1851411","tags":["report"]},{"url":"https://bugzilla.redhat.com/1852244","tags":["report"]},{"url":"https://bugzilla.redhat.com/1853263","tags":["report"]},{"url":"https://bugzilla.redhat.com/1857157","tags":["report"]},{"url":"https://bugzilla.redhat.com/1858318","tags":["report"]},{"url":"https://bugzilla.redhat.com/1859213","tags":["report"]},{"url":"https://bugzilla.redhat.com/1863079","tags":["report"]},{"url":"https://bugzilla.redhat.com/1863616","tags":["report"]},{"url":"https://bugzilla.redhat.com/1866291","tags":["report"]},{"url":"https://bugzilla.redhat.com/1866938","tags":["report"]},{"url":"https://bugzilla.redhat.com/1868432","tags":["report"]},{"url":"https://bugzilla.redhat.com/1869311","tags":["report"]},{"url":"https://bugzilla.redhat.com/1870202","tags":["report"]},{"url":"https://bugzilla.redhat.com/1874015","tags":["report"]},{"url":"https://bugzilla.redhat.com/1875348","tags":["report"]},{"url":"https://bugzilla.redhat.com/1879604","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2020-4670.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2015-9251","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2016-10735","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-14040","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-14042","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20676","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-20677","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-11358","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2019-8331","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-11022","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-1722","tags":["report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-1722","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1399546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1404770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1545755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1756568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1780548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1782587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1819725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1825829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1842950","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3936.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-9251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-9251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-9251","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10735","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20676","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-8331","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-8331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8331","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11358","tags":["advisory"]},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/","tags":["article"]},{"url":"https://www.drupal.org/sa-core-2019-006","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-1722","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1430365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1488732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1751295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1801698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1818765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1818877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1833266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1834909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1849914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1852244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1858318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1863079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1863616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1870202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879604","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4670.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2020:4670","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-1722","tags":["report"]},{"url":"https://pagure.io/freeipa/issue/8268","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-1722","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T20:46:52Z","modified":"2024-08-04T06:46:30.371Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:56.638833Z"}],"euvd":[{"id":"EUVD-2020-12573","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T20:46:52Z","modified":"2024-08-04T06:46:30Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:08:12.086746Z"}],"ghsa":[{"id":"GHSA-mvj3-pw74-8w47","title":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1...","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2022-05-24T17:16:36Z","modified":"2023-02-10T05:07:19Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:54:03.896291Z"}],"nvd":[{"id":"CVE-2020-1722","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T21:15:13.64Z","modified":"2026-06-17T03:02:16.51Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":5.4,"vector":"AV:N/AC:H/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"CVE-2020-1722","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T21:15:13.64Z","modified":"2026-10-24T10:30:24.636037806Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-1722","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T21:15:13.64Z","modified":"2026-11-07T11:00:04.107311492Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T11:15:14.449016Z"},{"id":"RHSA-2020:3936","title":"Red Hat Security Advisory: ipa security, bug fix, and enhancement update","status":"published","published":"2024-09-18T04:14:57Z","modified":"2026-10-13T10:01:49Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4670","title":"Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update","status":"published","published":"2024-10-21T23:23:29Z","modified":"2026-10-13T10:01:53Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RLSA-2020:4670","title":"Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update","description":"Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nThe following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)\n\nSecurity Fix(es):\n\n* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* bootstrap: XSS in the data-target attribute (CVE-2016-10735)\n\n* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)\n\n* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)\n\n* bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)\n\n* bootstrap: XSS in the affix configuration target property (CVE-2018-20677)\n\n* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)\n\n* js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)\n\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)\n\n* ipa: No password length restriction leads to denial of service (CVE-2020-1722)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:25:36Z","modified":"2026-02-04T07:40:20.246502Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-1722","description":"A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (\u003e= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.","status":"published","published":"2020-04-27T21:15:00Z","modified":"2026-10-17T12:56:53.691697246Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"ALSA-2020:4670","title":"Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update","description":"AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. \n\nThe following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)\n\nSecurity Fix(es):\n\n* js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)\n\n* bootstrap: XSS in the data-target attribute (CVE-2016-10735)\n\n* bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)\n\n* bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)\n\n* bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)\n\n* bootstrap: XSS in the affix configuration target property (CVE-2018-20677)\n\n* bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)\n\n* js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)\n\n* jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)\n\n* ipa: No password length restriction leads to denial of service (CVE-2020-1722)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2020-11-03T12:25:36Z","modified":"2026-10-29T11:00:19.498440687Z","updated_at":"2026-11-02T15:27:51.196609Z"}]}}