CVE-Katalog

CVE-2017-12169

freeipa: CVE-2017-12169

Schweregrad: Low
Published: Jan 10, 2018, 3:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.93% · Oct 22, 2026

It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeipa	sid	`4.13.1-1`	vulnerable
Debian	freeipa	trixie	`4.12.4-1`	vulnerable
Debian	freeipa	bookworm	`4.9.11-1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeipa	source	sid	`(unfixed)`	unimportant	Not reported	[895950]
Debian	freeipa	source	trixie	`(unfixed)`	unimportant	Not reported	[895950]
Debian	freeipa	source	bookworm	`(unfixed)`	unimportant	Not reported	[895950]

[Debian bug #895950]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[freeipa-client]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · amd64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-epn]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · amd64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-samba]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · amd64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-common]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipaclient]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipalib]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Betroffen
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12

[Debian 13 (Trixie)]

[freeipa-client]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · amd64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
[freeipa-client-epn]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · amd64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
[freeipa-client-samba]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · amd64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Betroffen
  dsa · freeipa · debian · 13
[freeipa-common]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13
[python3-ipaclient]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13
[python3-ipalib]Betroffen
Quellpaket: [freeipa]
Details (2)
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Betroffen
  dsa · freeipa · debian · 13

Beobachtet: Oct 23, 2026, 5:26:01 PM UTC

Referenzen

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]