Red Hat Security Advisory: ipa security update
A moderate severity vulnerability (CVE-2024-1481) in Red Hat Identity Management (IdM) affects the freeipa component, where specially crafted HTTP requests can potentially cause a denial of service. This vulnerability impacts Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory (RHSA-2024:2147) with an update to address this issue. The advisory includes instructions for applying the update and references the Red Hat Enterprise Linux 9.4 release notes for additional changes.
AI Analysis
Technical Summary
CVE-2024-1481 is a denial of service vulnerability in the freeipa component of Red Hat Identity Management (IdM). The flaw is triggered by specially crafted HTTP requests that may cause the service to become unavailable. Red Hat has released an update for Red Hat Enterprise Linux 9.4 and its extended update support variants to fix this issue. The vulnerability is categorized under CWE-20 (Improper Input Validation). No CVSS score is provided in the advisory, but the vendor rates the impact as moderate.
Potential Impact
An attacker can send specially crafted HTTP requests to the freeipa service, potentially causing a denial of service condition. This could disrupt authentication and identity management services in affected Red Hat Enterprise Linux environments, impacting availability of centralized authentication and authorization functions.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Enterprise Linux 9.4 and related extended update support versions that addresses this vulnerability. Users should apply the update as described in the Red Hat advisory RHSA-2024:2147 and the linked update article (https://access.redhat.com/articles/11258) to remediate the issue. No additional mitigation steps are indicated by the vendor.
Red Hat Security Advisory: ipa security update
Description
A moderate severity vulnerability (CVE-2024-1481) in Red Hat Identity Management (IdM) affects the freeipa component, where specially crafted HTTP requests can potentially cause a denial of service. This vulnerability impacts Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory (RHSA-2024:2147) with an update to address this issue. The advisory includes instructions for applying the update and references the Red Hat Enterprise Linux 9.4 release notes for additional changes.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-1481 is a denial of service vulnerability in the freeipa component of Red Hat Identity Management (IdM). The flaw is triggered by specially crafted HTTP requests that may cause the service to become unavailable. Red Hat has released an update for Red Hat Enterprise Linux 9.4 and its extended update support variants to fix this issue. The vulnerability is categorized under CWE-20 (Improper Input Validation). No CVSS score is provided in the advisory, but the vendor rates the impact as moderate.
Potential Impact
An attacker can send specially crafted HTTP requests to the freeipa service, potentially causing a denial of service condition. This could disrupt authentication and identity management services in affected Red Hat Enterprise Linux environments, impacting availability of centralized authentication and authorization functions.
Mitigation Recommendations
Red Hat has released an official security update for Red Hat Enterprise Linux 9.4 and related extended update support versions that addresses this vulnerability. Users should apply the update as described in the Red Hat advisory RHSA-2024:2147 and the linked update article (https://access.redhat.com/articles/11258) to remediate the issue. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:2147
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a3da1f84853345fc1835090
Added to database: 06/25/2026, 21:47:37 UTC
Last enriched: 06/25/2026, 22:51:05 UTC
Last updated: 07/02/2026, 20:51:13 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.