Catalogo CVE

CVE-2017-12169

freeipa: CVE-2017-12169

Gravità: Low
Published: Jan 10, 2018, 3:29:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.93% · Oct 22, 2026

It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' permission. A remote, authenticated attacker could potentially use this flaw to disclose the password hashes belonging to Stage Users. This security issue does not result in disclosure of password hashes belonging to active standard users. NOTE: some developers feel that this report is a suggestion for a design change to Stage User activation, not a statement of a vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeipa	sid	`4.13.1-1`	vulnerable
Debian	freeipa	trixie	`4.12.4-1`	vulnerable
Debian	freeipa	bookworm	`4.9.11-1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeipa	source	sid	`(unfixed)`	unimportant	Not reported	[895950]
Debian	freeipa	source	trixie	`(unfixed)`	unimportant	Not reported	[895950]
Debian	freeipa	source	bookworm	`(unfixed)`	unimportant	Not reported	[895950]

[Debian bug #895950]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[freeipa-client]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-epn]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-samba]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-common]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipaclient]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipalib]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12

[Debian 13 (Trixie)]

[freeipa-client]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-client-epn]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-client-samba]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-common]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
[python3-ipaclient]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
[python3-ipalib]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13

Osservato: Oct 23, 2026, 5:26:01 PM UTC

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]