Поиск уязвимостей
Количество 7
Количество 7
GHSA-7hpj-hfcr-5qwm
Code injection in FreeIPA
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x ve ...
ELSA-2020-0378
ELSA-2020-0378: ipa security and bug fix update (IMPORTANT)
ALT-PU-2019-3193
ALT-PU-2019-3193: package `freeipa` update to version 4.7.4-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-7hpj-hfcr-5qwm Code injection in FreeIPA | CVSS3: 8.8 | 7% Низкий | почти 5 лет назад |
 | CVE-2019-14867 A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server. | CVSS3: 8.8 | 7% Низкий | почти 7 лет назад |
 | CVE-2019-14867 A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server. | CVSS3: 8.8 | 7% Низкий | около 7 лет назад |
 | CVE-2019-14867 A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server. | CVSS3: 8.8 | 7% Низкий | почти 7 лет назад |
| CVE-2019-14867 A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x ve ... | CVSS3: 8.8 | 7% Низкий | почти 7 лет назад |
| ELSA-2020-0378 ELSA-2020-0378: ipa security and bug fix update (IMPORTANT) | почти 7 лет назад | ||
| ALT-PU-2019-3193 ALT-PU-2019-3193: package `freeipa` update to version 4.7.4-alt1 | CVSS3: 8.8 | почти 7 лет назад |
Уязвимостей на страницу