https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:47:48.147359+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2147 ALSA-2024:2147 — Moderate: ipa security update 2026-10-03T16:47:48.160409+00:00

Affected: AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-server, AlmaLinux:9: ipa-server-common, AlmaLinux:9: ipa-server-dns, AlmaLinux:9: ipa-server-trust-ad and 4 more

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Security Fix(es):

* freeipa: specially crafted HTTP requests potentially lead to denial of service (CVE-2024-1481)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-01678 bdu:2024-01678 2026-10-03T16:47:48.160497+00:00 bdu:2024-01678 https://cve.radiocsirt.org/vuln/euvd-2026-270714 EUVD-2026-270714 2026-10-03T16:47:48.160516+00:00 EUVD-2026-270714 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1481 fkie_cve-2024-1481 2026-10-03T16:47:48.160529+00:00

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-5g67-qx42-9m78 GHSA-5g67-qx42-9m78 2026-10-03T16:47:48.160552+00:00

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

 https://cve.radiocsirt.org/vuln/gsd-2024-1481 gsd-2024-1481 2026-10-03T16:47:48.160568+00:00 gsd-2024-1481 https://cve.radiocsirt.org/vuln/rhsa-2024:2147 RHSA-2024:2147 — Red Hat Security Advisory: ipa security update 2026-10-03T16:47:48.160579+00:00

freeipa: specially crafted HTTP requests potentially lead to denial of service

 https://cve.radiocsirt.org/vuln/rhsa-2024:3044 RHSA-2024:3044 — Red Hat Security Advisory: idm:DL1 security update 2026-10-03T16:47:48.160597+00:00

freeipa: specially crafted HTTP requests potentially lead to denial of service

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1481 UBUNTU-CVE-2024-1481 2026-10-03T16:47:48.160613+00:00

Affected: Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0995 WID-SEC-W-2024-0995 — Red Hat Enterprise Linux: Mehrere Schwachstellen 2026-10-03T16:47:48.160643+00:00

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Privilegien zu erweitern.