CVE-2024-3183

bind-dyndb-ldap: Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution fo...

CVE-2024-3183 is fixed in 37 products on 1 platform, first by RHSA-2024:3755, released June 10, 2024. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.1
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0205
81st percentile

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service * CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
bind-dyndb-ldap · RHEL 8 0:11.6-5.module+el8.10.0+21691+df63127d RHSA-2024:3755 Jun 10, 2024
bind-dyndb-ldap · almalinux 8 11.6-5.module_el8.10.0+3844+20e075e5.alma.2 ALSA-2024:3755 Jun 10, 2024
bind-dyndb-ldap · ol 8 0:11.6-5.module+el8.10.0+90339+985471f7 ELSA-2024-3755 Jun 11, 2024
bind-dyndb-ldap · rocky 8 0:11.6-5.module+el8.10.0+1819+0aeba2f1 RLSA-2024:3755 Jun 14, 2024
custodia · RHEL 8 0:0.6.0-3.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
custodia · almalinux 8 0.6.0-3.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
custodia · ol 8 0:0.6.0-3.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
custodia · rocky 8 0:0.6.0-3.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
freeipa · Debian 13.5 (trixie) 4.12.2-1 DEBIAN-CVE-2024-3183 Jun 12, 2024
ipa · rocky 8 0:4.9.13-10.module+el8.10.0+1828+d0e644b0 RLSA-2024:3755 Jun 14, 2024
ipa · rocky 9 0:4.11.0-15.el9_4 RLSA-2024:3754 Jun 14, 2024
ipa-client · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-client · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-client · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-client · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-client · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-client · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-client-common · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-client-common · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-client-common · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-client-common · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-client-common · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-client-common · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-client-epn · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-client-epn · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-client-epn · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-client-epn · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-client-epn · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-client-epn · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-client-samba · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-client-samba · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-client-samba · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-client-samba · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-client-samba · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-client-samba · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-common · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-common · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-common · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-common · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-common · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-common · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-healthcheck · RHEL 8 0:0.12-3.module+el8.9.0+19634+c162f948 RHSA-2024:3755 Jun 10, 2024
ipa-healthcheck · almalinux 8 0.12-3.module_el8.9.0+3651+d05ea4c5 ALSA-2024:3755 Jun 10, 2024
ipa-healthcheck · ol 8 0:0.12-3.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
ipa-healthcheck · rocky 8 0:0.12-3.module+el8.9.0+1433+5bd2f890 RLSA-2024:3755 Jun 14, 2024
ipa-healthcheck-core · RHEL 8 0:0.12-3.module+el8.9.0+19634+c162f948 RHSA-2024:3755 Jun 10, 2024
ipa-healthcheck-core · almalinux 8 0.12-3.module_el8.9.0+3651+d05ea4c5 ALSA-2024:3755 Jun 10, 2024
ipa-healthcheck-core · ol 8 0:0.12-3.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
ipa-python-compat · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-python-compat · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-python-compat · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-selinux · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-selinux · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-selinux · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-selinux · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-selinux · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-selinux · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-server · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-server · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-server · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-server · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-server · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-server · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-server-common · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-server-common · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-server-common · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-server-common · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-server-common · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-server-common · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-server-dns · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-server-dns · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-server-dns · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-server-dns · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-server-dns · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-server-dns · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
ipa-server-trust-ad · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
ipa-server-trust-ad · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
ipa-server-trust-ad · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
ipa-server-trust-ad · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
ipa-server-trust-ad · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
ipa-server-trust-ad · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
opendnssec · RHEL 8 0:2.1.7-1.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
opendnssec · almalinux 8 2.1.7-1.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
opendnssec · ol 8 0:2.1.7-1.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
opendnssec · rocky 8 0:2.1.7-1.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
python-jwcrypto · rocky 8 0:0.5.0-2.module+el8.10.0+1818+2dfda7a6 RLSA-2024:3755 Jun 14, 2024
python-kdcproxy · rocky 8 0:0.4-5.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
python-qrcode · rocky 8 0:5.1-12.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
python-yubico · rocky 8 0:1.3.2-9.1.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
python3-custodia · RHEL 8 0:0.6.0-3.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-custodia · almalinux 8 0.6.0-3.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
python3-custodia · ol 8 0:0.6.0-3.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
python3-ipaclient · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
python3-ipaclient · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
python3-ipaclient · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
python3-ipaclient · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
python3-ipaclient · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
python3-ipaclient · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
python3-ipalib · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
python3-ipalib · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
python3-ipalib · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
python3-ipalib · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
python3-ipalib · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
python3-ipalib · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
python3-ipaserver · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
python3-ipaserver · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
python3-ipaserver · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
python3-ipaserver · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
python3-ipaserver · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
python3-ipaserver · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
python3-ipatests · RHEL 8 0:4.9.13-10.module+el8.10.0+21944+3943ad77 RHSA-2024:3755 Jun 10, 2024
python3-ipatests · RHEL 9 0:4.11.0-15.el9_4 RHSA-2024:3754 Jun 10, 2024
python3-ipatests · almalinux 8 4.9.13-10.module_el8.10.0+3857+9c8da539 ALSA-2024:3755 Jun 10, 2024
python3-ipatests · almalinux 9 4.11.0-15.el9_4.alma.1 ALSA-2024:3754 Jun 10, 2024
python3-ipatests · ol 8 0:4.9.13-10.0.1.module+el8.10.0+90350+f6ece971 ELSA-2024-3755 Jun 11, 2024
python3-ipatests · ol 9 0:4.11.0-15.0.1.el9_4 ELSA-2024-3754 Jun 10, 2024
python3-jwcrypto · RHEL 8 0:0.5.0-2.module+el8.10.0+21691+df63127d RHSA-2024:3755 Jun 10, 2024
python3-jwcrypto · almalinux 8 0.5.0-2.module_el8.10.0+3844+20e075e5 ALSA-2024:3755 Jun 10, 2024
python3-jwcrypto · ol 8 0:0.5.0-2.module+el8.10.0+90339+985471f7 ELSA-2024-3755 Jun 11, 2024
python3-kdcproxy · RHEL 8 0:0.4-5.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-kdcproxy · almalinux 8 0.4-5.module_el8.9.0+3785+2238a12a ALSA-2024:3755 Jun 10, 2024
python3-kdcproxy · ol 8 0:0.4-5.module+el8.9.0+90122+3305dc1d ELSA-2024-3755 Jun 11, 2024
python3-pyusb · RHEL 8 0:1.0.0-9.1.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-pyusb · almalinux 8 1.0.0-9.1.module_el8.7.0+3349+cfeff52e ALSA-2024:3755 Jun 10, 2024
python3-pyusb · ol 8 0:1.0.0-9.1.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
python3-qrcode · RHEL 8 0:5.1-12.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-qrcode · almalinux 8 5.1-12.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
python3-qrcode · ol 8 0:5.1-12.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
python3-qrcode-core · RHEL 8 0:5.1-12.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-qrcode-core · almalinux 8 5.1-12.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
python3-qrcode-core · ol 8 0:5.1-12.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
python3-yubico · RHEL 8 0:1.3.2-9.1.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
python3-yubico · almalinux 8 1.3.2-9.1.module_el8.7.0+3349+cfeff52e ALSA-2024:3755 Jun 10, 2024
python3-yubico · ol 8 0:1.3.2-9.1.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
pyusb · rocky 8 0:1.0.0-9.1.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
slapi-nis · RHEL 8 0:0.60.0-4.module+el8.10.0+20723+03062ebd RHSA-2024:3755 Jun 10, 2024
slapi-nis · almalinux 8 0.60.0-4.module_el8.10.0+3844+20e075e5.alma.1 ALSA-2024:3755 Jun 10, 2024
slapi-nis · ol 8 0:0.60.0-4.module+el8.10.0+90297+bfe93ccc ELSA-2024-3755 Jun 11, 2024
slapi-nis · rocky 8 0:0.60.0-4.module+el8.9.0+1573+39ab85f4 RLSA-2024:3755 Jun 14, 2024
softhsm · RHEL 8 0:2.6.0-5.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
softhsm · almalinux 8 2.6.0-5.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
softhsm · ol 8 0:2.6.0-5.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024
softhsm · rocky 8 0:2.6.0-5.module+el8.9.0+1371+ffa84eb9 RLSA-2024:3755 Jun 14, 2024
softhsm-devel · RHEL 8 0:2.6.0-5.module+el8.9.0+18911+94941f82 RHSA-2024:3755 Jun 10, 2024
softhsm-devel · almalinux 8 2.6.0-5.module_el8.6.0+2881+2f24dc92 ALSA-2024:3755 Jun 10, 2024
softhsm-devel · ol 8 0:2.6.0-5.module+el8.9.0+90094+20819f5a ELSA-2024-3755 Jun 11, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.