| Package | Affected versions | Patched versions |
|---|---|---|
| freeipa | = 3.0.0= 3.0.1= 3.0.2= 3.1.1= 3.1.2= 3.1.3= 3.1.4≤ 3.1.5 |
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free