High severity8.8NVD Advisory· Published Nov 27, 2019· Updated Jun 17, 2026
CVE-2019-14867
CVE-2019-14867
Description
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
ipaPyPI | >= 4.6.2, < 4.6.7 | 4.6.7 |
ipaPyPI | >= 4.7.0, < 4.7.4 | 4.7.4 |
ipaPyPI | >= 4.8.0, < 4.8.3 | 4.8.3 |
freeipaPyPI | >= 4.6.2, < 4.6.7 | 4.6.7 |
freeipaPyPI | >= 4.7.0, < 4.7.4 | 4.7.4 |
freeipaPyPI | >= 4.8.0, < 4.8.3 | 4.8.3 |
Affected products
6cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- ghsa-coords2 versions
>= 4.6.2, < 4.6.7+ 1 more
- (no CPE)range: >= 4.6.2, < 4.6.7
- (no CPE)range: >= 4.6.2, < 4.6.7
- Red Hat/ipav5Range: all IPA 4.6.x versions before 4.6.7
Patches
Vulnerability mechanics
References
14- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-7hpj-hfcr-5qwmghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-14867ghsaADVISORY
- access.redhat.com/errata/RHBA-2019:4268nvdWEB
- access.redhat.com/errata/RHSA-2020:0378nvdWEB
- github.com/pypa/advisory-database/tree/main/vulns/ipa/PYSEC-2019-28.yamlghsaWEB
- github.com/pypa/advisory-db/tree/main/vulns/ipa/PYSEC-2019-28.yamlghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKFghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4TghsaWEB
- www.freeipa.org/page/Releases/4.6.7nvdRelease NotesWEB
- www.freeipa.org/page/Releases/4.7.4nvdRelease NotesWEB
- www.freeipa.org/page/Releases/4.8.3nvdRelease NotesWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/nvd
News mentions
0No linked articles in our index yet.