漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components of the IPA server, which parsed kerberos key data. An unauthenticated attacker who could trigger parsing of the krb principal key could cause the IPA server to crash or in some conditions, cause arbitrary code to be executed on the server hosting the IPA server.
CVSS Information
N/A
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
Red Hat FreeIPA 代码注入漏洞
Vulnerability Description
Red Hat FreeIPA是一个综合安全信息管理解决方案。 Red Hat FreeIPA 4.6.7之前的4.6.x版本、4.7.4之前的4.7.x版本和4.8.3之前的4.8.x版本中的‘ber_scanf’函数存在代码注入漏洞。攻击者可借助特制kerberos密钥数据利用该漏洞在系统上执行任意代码，或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A