CVE-2019-14867
Last modified
CVE-2019-14867 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.. EPSS estimates a 6.33% chance of exploitation in the next 30 days.
Description
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Freeipa | Freeipa | >= 4.6.0, < 4.6.7 |
| Freeipa | Freeipa | >= 4.7.0, < 4.7.4 |
| Freeipa | Freeipa | >= 4.8.0, < 4.8.3 |
| Fedoraproject | Fedora | 30 |
| Fedoraproject | Fedora | 31 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867Issue Tracking, Third Party Advisory
- https://www.freeipa.org/page/Releases/4.6.7Release Notes
- https://www.freeipa.org/page/Releases/4.7.4Release Notes
- https://www.freeipa.org/page/Releases/4.8.3Release Notes
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867Issue Tracking, Third Party Advisory
- https://www.freeipa.org/page/Releases/4.6.7Release Notes
- https://www.freeipa.org/page/Releases/4.7.4Release Notes
- https://www.freeipa.org/page/Releases/4.8.3Release Notes
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-14867?
How severe is CVE-2019-14867?
How do I fix CVE-2019-14867?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-14861All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.1…5.3
- CVE-2019-14862There is a vulnerability in knockout before version 3.5.0-be…6.1
- CVE-2019-14863There is a vulnerability in all angular versions before 1.5.…6.1
- CVE-2019-14864Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and…6.5
- CVE-2019-14865A flaw was found in the grub2-set-bootflag utility of grub2.…5.9
- CVE-2019-14866In all versions of cpio before 2.13 does not properly valida…7.3
- CVE-2019-14868In ksh version 20120801, a flaw was found in the way it eval…7.8
- CVE-2019-14869A flaw was found in all versions of ghostscript 9.x before 9…8.8
- CVE-2019-1487An information disclosure vulnerability in Android Apps usin…6.5
- CVE-2019-14870All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.1…5.4
- CVE-2019-14871The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) …6.5
- CVE-2019-14872The _dtoa_r function of the newlib libc library, prior to ve…6.5
Are you affected by CVE-2019-14867?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST