CVE-2019-14867highCWE-400CWE-94

CVE-2019-14867: high-severity vulnerability in Red Hat ipa

Published · Updated

Follow this CVE+ Monitor ipa+ Monitor freeipa

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 7.4%
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Red Hat · ipa
Related CVEs — Red Hat ipa

In the same product, most dangerous first.

CVE-2017-2590HIGHCVE-2017-2590EPSS 1.3%CVE-2020-1722MEDIUMCVE-2020-1722EPSS 1.2%CVE-2019-14826MEDIUMCVE-2019-14826EPSS 0.3%