| Package | Affected versions | Patched versions |
|---|---|---|
| freeipa | < 4.13.3 | 4.13.3 |
A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a denial of service, degrading the availability of the IPA service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free