9.1
Critique
CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA
Description
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 10 | Versions non publiées | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées | |
| Red Hat Enterprise Linux 8 8100020250918211722.823393 | premières → < 8100020250918211722.823393f5 | 8100020250918211722.823393f5 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020250924104944.792 | premières → < 8020020250924104944.792f4060 | 8020020250924104944.792f4060 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020250923175408.5 | premières → < 8040020250923175408.5b01ab7e | 8040020250923175408.5b01ab7e |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020250923175408.5 | premières → < 8040020250923175408.5b01ab7e | 8040020250923175408.5b01ab7e |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020250916174421 | premières → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020250916174421 | premières → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020250916174421 | premières → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
Afficher les 7 autres branches Masquer les 7 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020250918152850 | premières → < 8080020250918152850.b0a6ceea | 8080020250918152850.b0a6ceea |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020250918152850 | premières → < 8080020250918152850.b0a6ceea | 8080020250918152850.b0a6ceea |
| Red Hat Enterprise Linux 9 | Versions non publiées | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions non publiées | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées |
Autres CVE de Red Hat Enterprise Linux 10
Les 1456 CVE de Red Hat Enterprise Linux 10 →
CVE-2026-123876
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
4.4
Moyenne
CVE-2026-120749
Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
6.2
Moyenne
CVE-2026-123037
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
6.7
Moyenne
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Non notée