CVE-2024-1481: Red Hat Freeipa: specially crafted http requests potentially lead to denial of service
This Red Hat advisory covers CVE-2024-1481 in Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 7.
- CVE-2024-1481
Key facts
- Vendor rating
- Medium, CVSS 5.3
- CISA KEV
- Not listed (catalogue checked )
- Fixed in
- idm:client-8100020240307184541.6d180cd9, idm:DL1-8100020240307185118.fc00487d, ipa-0:4.11.0-9.el9_4 and 2 more below
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.
This vulnerability poses a moderate severity risk due to its potential for a denial of service (DoS) attack and limited exploitation scope.
While it allows for influencing the arguments passed to the kinit command, thereby potentially disrupting authentication processes and causing service interruptions, it does not grant unauthorized access to sensitive resources or compromise the integrity of the system.
The restricted access rights of the 'ipaapi' user limit the impact to denial of service scenarios, mitigating the risk of unauthorized authentication or access to other accounts via keytab files or cached credentials.
Furthermore, the vulnerability does not enable the extraction of sensitive information or the execution of arbitrary commands beyond the context of the kinit command. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Weakness: CWE-20. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 7.
Will not fix / out of support: Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2024:3044, RHSA-2024:2147.
Text from the source record.
How to fix CVE-2024-1481
Upgrade to a fixed release named by Red Hat:
- idm:client-8100020240307184541.6d180cd9
- idm:DL1-8100020240307185118.fc00487d
- ipa-0:4.11.0-9.el9_4
- RHSA-2024:3044
- RHSA-2024:2147
Vendor guidance
- Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Support dates for the fixed release lines
- Red Hat Enterprise Linux 4: support ended
More Red Hat Linux advisories
CVE-2026-111497Oct 22, 2026Out-of-Bounds Write in Google Brotli DecoderCVE-2026-109619Oct 21, 2026fatal error handling retains stale request state leading to use-after-freeCVE-2026-109618Oct 21, 2026OOM bailout during request parsing leads to memory corruption and RCECVE-2026-123158Nov 5, 2026Password authentication bypass via password hash misinterpretationCVE-2026-119977Oct 31, 2026Arbitrary code execution via predictable upgrade staging pathsCVE-2026-97229Oct 13, 2026integer overflow issue in CI/CD regular expression compiler
Get an email when Red Hat RHEL & SELinux publishes the next one.
See Red Hat RHEL & SELinux's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
