https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:36:36.928191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-46410 cnvd-2019-46410 2026-10-03T02:36:36.936386+00:00 cnvd-2019-46410 https://cve.radiocsirt.org/vuln/euvd-2026-56641 EUVD-2026-56641 2026-10-03T02:36:36.936423+00:00 EUVD-2026-56641 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14867 fkie_cve-2019-14867 2026-10-03T02:36:36.936437+00:00

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

 https://cve.radiocsirt.org/vuln/ghsa-7hpj-hfcr-5qwm GHSA-7hpj-hfcr-5qwm — Code injection in FreeIPA 2026-10-03T02:36:36.936468+00:00

Affected: PyPI: ipa, PyPI: freeipa

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

 https://cve.radiocsirt.org/vuln/gsd-2019-14867 gsd-2019-14867 2026-10-03T02:36:36.936496+00:00 gsd-2019-14867 https://cve.radiocsirt.org/vuln/pysec-2019-28 PYSEC-2019-28 2026-10-03T02:36:36.936508+00:00

Affected: PyPI: ipa

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.

 https://cve.radiocsirt.org/vuln/rhba-2019:4268 RHBA-2019:4268 — Red Hat Bug Fix Advisory: idm:DL1 bug fix update 2026-10-03T02:36:36.936527+00:00

ipa: Batch API logging user passwords to /var/log/httpd/error_log ipa: Denial of service in IPA server due to wrong use of ber_scanf()

 https://cve.radiocsirt.org/vuln/rhsa-2020:1269 RHSA-2020:1269 — Red Hat Security Advisory: idm:DL1 security update 2026-10-03T02:36:36.936545+00:00

ipa: Batch API logging user passwords to /var/log/httpd/error_log ipa: Denial of service in IPA server due to wrong use of ber_scanf()

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14867 UBUNTU-CVE-2019-14867 2026-10-03T02:36:36.936560+00:00

Affected: Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa

A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.