p PatchFirst

CVE-2019-14867

CVE-2019-14867

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

CVSS 8.8 · High · EPSS 7.4% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • ipa

    Versions
    • all IPA 4.6.x versions before 4.6.7: Affected
    • all IPA 4.7.x versions before 4.7.4: Affected
    • all IPa 4.8.x versions before 4.8.3: Affected

    No fix published

  • freeipa Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.8.3-1

    Update to 4.8.3-1

  • freeipa Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.8.3-1

    Update to 4.8.3-1

  • ipa PyPI

    Versions
    • 4.6.2
    • 4.6.3
    • 4.6.4
    • 4.6.5
    Affected ranges
    • ECOSYSTEM: ≥ 4.6.2, < 4.6.7

    Update to 4.6.7

  • ipa PyPI

    Versions
    • 4.7.0
    • 4.7.1
    • 4.7.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.7.0, < 4.7.4

    Update to 4.7.4

  • ipa PyPI

    Versions
    • 4.8.0
    • 4.8.1
    • 4.8.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.8.0, < 4.8.3

    Update to 4.8.3

  • freeipa PyPI

    Versions
    • 4.6.2
    • 4.6.3
    • 4.6.4
    • 4.6.5
    Affected ranges
    • ECOSYSTEM: ≥ 4.6.2, < 4.6.7

    Update to 4.6.7

  • freeipa PyPI

    Versions
    • 4.7.0
    • 4.7.1
    • 4.7.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.7.0, < 4.7.4

    Update to 4.7.4

  • freeipa PyPI

    Versions
    • 4.8.0
    • 4.8.1
    • 4.8.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.8.0, < 4.8.3

    Update to 4.8.3

  • ipa PyPI

    Versions
    • 4.6.2
    • 4.6.3
    • 4.6.4
    • 4.6.5
    • 4.7.0
    • 4.7.1
    • 4.7.2
    • 4.8.0
    • 4.8.1
    • 4.8.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.6.2, < 4.6.7 ∪ ≥ 4.7.0, < 4.7.4 ∪ ≥ 4.8.0, < 4.8.3

    Update to 4.6.7; Update to 4.7.4; Update to 4.8.3

  • freeipa PyPI

    Versions
    • 4.6.2
    • 4.6.3
    • 4.6.4
    • 4.6.5
    • 4.7.0
    • 4.7.1
    • 4.7.2
    • 4.8.0
    • 4.8.1
    • 4.8.2
    Affected ranges
    • ECOSYSTEM: ≥ 4.6.2, < 4.6.7 ∪ ≥ 4.7.0, < 4.7.4 ∪ ≥ 4.8.0, < 4.8.3

    Update to 4.6.7; Update to 4.7.4; Update to 4.8.3

  • freeipa Ubuntu:Pro:14.04:LTS

    Versions
    • 3.2.1-0ubuntu1
    • 3.3.4-0ubuntu1
    • 3.3.4-0ubuntu2
    • 3.3.4-0ubuntu3
    • 3.3.4-0ubuntu3.1
    • 3.3.4-0ubuntu3.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeipa Ubuntu:Pro:16.04:LTS

    Versions
    • 4.1.4-1
    • 4.3.1-0ubuntu1
    • 4.3.1-0ubuntu1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeipa Ubuntu:18.04:LTS

    Versions
    • 4.4.4-3ubuntu1
    • 4.4.4-4
    • 4.7.0~pre1+git20180411-2ubuntu1
    • 4.7.0~pre1+git20180411-2ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeipa Ubuntu:20.04:LTS

    Versions
    • 4.8.1-2ubuntu1
    • 4.8.3-1
    • 4.8.6-1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • freeipa Ubuntu:22.04:LTS

    Versions
    • 4.8.6-1ubuntu6
    • 4.8.6-1ubuntu8
    • 4.8.6-1ubuntu9
    • 4.9.8-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →