CVE-2016-7030
Fixed in a distro release EPSS 5%
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.
Products: freeipa
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | freeipa | 4.4.4-1 |
| Debian 13 | freeipa | 4.4.4-1 |
| Red Hat Enterprise Linux 7 | ipa | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-admintools | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-client | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-client-common | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-common | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-debuginfo | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-python-compat | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-server | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-server-common | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-server-dns | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | ipa-server-trust-ad | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | python2-ipaclient | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | python2-ipalib | 0:4.4.0-14.el7_3.1.1 |
| Red Hat Enterprise Linux 7 | python2-ipaserver | 0:4.4.0-14.el7_3.1.1 |
| Ubuntu Pro 14.04 LTS | freeipa | 3.3.4-0ubuntu3.1+esm1 |
| Ubuntu Pro 16.04 LTS | freeipa | 4.3.1-0ubuntu1+esm1 |