Use of Password Hash With Insufficient Computational Effort in FreeIPA - CVE-2024-3183

Vulnerability identifier: #VU92249

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-3183

CWE-ID: CWE-916

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses principal key to encrypt tickets. A remote attacker can brute-force the principal key and decrypt communication between KDC and the client.

FreeIPA
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-kdcproxy
python3-jwcrypto
python3-custodia
custodia
ipa-healthcheck-core
ipa-healthcheck
slapi-nis
python3-pyusb
python3-yubico
opendnssec
softhsm-devel
softhsm
ipa (Red Hat package)
ipa-python-compat
ipa-server-trust-ad
ipa-client-common
ipa-common
ipa-server
ipa-client
python2-ipaserver
python2-ipalib
python2-ipaclient
ipa-server-dns
ipa-server-common
ipa-selinux
python3-ipaclient
python3-ipalib
python3-ipaserver
python3-ipatests
ipa-client-samba
ipa-client-epn
freeipa
python3-qrcode
python3-qrcode-core
bind-dyndb-ldap

Install updates from vendor's website.

FreeIPA - addressed in versions 4.11.2, 4.12.1
python3-kdcproxy - update to 0.4-5
python3-jwcrypto - update to 0.5.0-2
python3-custodia - update to 0.6.0-3
custodia - update to 0.6.0-3
ipa-healthcheck-core - update to 0.12-3
ipa-healthcheck - update to 0.12-3
slapi-nis - update to 0.60.0-4.0.1
python3-pyusb - update to 1.0.0-9.1
python3-yubico - update to 1.3.2-9.1
opendnssec - update to 2.1.7-1
softhsm-devel - update to 2.6.0-5
softhsm - update to 2.6.0-5
ipa (Red Hat package) - addressed in versions 4.6.8-5.el7_9.17, 4.9.8-11.el9_0.3, 4.10.1-12.el9_2.2, 4.11.0-15.el9_4
ipa-python-compat - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-server-trust-ad - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-client-common - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-common - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-server - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-client - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
python2-ipaserver - update to 4.6.8-5.0.1
python2-ipalib - update to 4.6.8-5.0.1
python2-ipaclient - update to 4.6.8-5.0.1
ipa-server-dns - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-server-common - addressed in versions 4.6.8-5.0.1, 4.9.13-10.0.1
ipa-selinux - update to 4.9.13-10.0.1
python3-ipaclient - update to 4.9.13-10.0.1
python3-ipalib - update to 4.9.13-10.0.1
python3-ipaserver - update to 4.9.13-10.0.1
python3-ipatests - update to 4.9.13-10.0.1
ipa-client-samba - update to 4.9.13-10.0.1
ipa-client-epn - update to 4.9.13-10.0.1
freeipa - addressed in versions 4.12.1-1.fc39, 4.12.1-1.fc40
python3-qrcode - update to 5.1-12
python3-qrcode-core - update to 5.1-12
bind-dyndb-ldap - update to 11.6-5

• Exploit #12352 - CVE-2024-3183-POC (February 6, 2026)
• Exploit #10426 - CVE-2024-3183-POC (August 23, 2024)

• https://bugzilla.redhat.com/show_bug.cgi?id=2270685
• https://www.freeipa.org/release-notes/4-12-1.html

• Multiple vulnerabilities in FreeIPA
• Red Hat Enterprise Linux8 update for the idm:DL1 module
• Red Hat Enterprise Linux 9 update for ipa
• Red Hat Enterprise Linux 8 update for the idm:DL1 module
• Red Hat Enterprise Linux8 update for the idm:DL1 module
• Red Hat Enterprise Linux 9 update for ipa
• Red Hat Enterprise Linux8 update for the idm:DL1 module
• Red Hat Enterprise Linux8 update for the idm:DL1 module
• Red Hat Enterprise Linux 7 update for ipa
• Red Hat Enterprise Linux 9 update for ipa
• Fedora 40 update for freeipa
• Fedora 39 update for freeipa
• Anolis OS update for ipa
• Anolis OS update for idm:DL1 module