Red Hat Enterprise Linux (FreeIPA): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2024-2698

  Freeipa: delegation rules allow a proxy service to impersonate any user to access another target service

  A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_deleg…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 12, 2024
• High 8.1
  CVE-2024-3183 Public exploit

  Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force

  A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the t…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Jun 12, 2024

Revision history

1. 2025-06-19 #6

   Neue Updates von Oracle Linux aufgenommen

2. 2024-07-11 #5

   Neue Updates von Amazon aufgenommen

3. 2024-06-16 #4

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

4. 2024-06-12 #3

   Neue Updates von Fedora aufgenommen

5. 2024-06-11 #2

   Neue Updates von Oracle Linux aufgenommen

6. 2024-06-10 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3754
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3755
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3756
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3757
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3758
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3759
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3760
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3761
• Red Hat Security Advisory vom 2024-06-10
  https://access.redhat.com/errata/RHSA-2024:3775
• Oracle Linux Security Advisory ELSA-2024-3755 vom 2024-06-11
  https://linux.oracle.com/errata/ELSA-2024-3755.html
• Oracle Linux Security Advisory ELSA-2024-3754 vom 2024-06-11
  http://linux.oracle.com/errata/ELSA-2024-3754.html
• Oracle Linux Security Advisory ELSA-2024-3760 vom 2024-06-11
  http://linux.oracle.com/errata/ELSA-2024-3760.html
• Fedora Security Advisory FEDORA-2024-2A466C6514 vom 2024-06-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2a466c6514
• Fedora Security Advisory FEDORA-2024-1D1B485611 vom 2024-06-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1d1b485611
• Rocky Linux Security Advisory RLSA-2024:3754 vom 2024-06-14
  https://errata.build.resf.org/RLSA-2024:3754
• Amazon Linux Security Advisory ALAS-2024-2585 vom 2024-07-11
  https://alas.aws.amazon.com/AL2/ALAS-2024-2585.html
• Oracle Linux Security Advisory ELSA-2025-9184 vom 2025-06-18
  https://linux.oracle.com/errata/ELSA-2025-9184.html