CVE-2024-3183: redhat enterprise_linux

CVSS: 8.1v3.1HighModified

AliasesRHSA-2024:3756RHSA-2024:3758RHSA-2024:3760+4 more

Published 12-06-2024Last modified 20-11-2025

Vulnerability summary

CVE-2024-3183 is a high (CVSS 8.1) vulnerability in redhat enterprise_linux. EPSS estimates a 2.05% chance of exploitation in the next 30 days, higher than 80.9% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.1/10

010

High · v3.1 (CVE.org)

EPSS score

2.05%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

RHSA-2024:3754 RHSA-2024:3755 RHSA-2024:3757 RHSA-2024:3759

Timeline

12-06-2024
PublishedVulnerability first disclosed.
20-11-2025
Last modifiedVulnerability information updated.

Description

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new session, which protects it from brute force attacks. However, the ticket it contains is encrypted using the target principal key directly. For user principals, this key is a hash of a public per-principal randomly-generated salt and the user’s password. If a principal is compromised it means the attacker would be able to retrieve tickets encrypted to any principal, all of them being encrypted by their own key directly. By taking these tickets and salts offline, the attacker could run brute force attacks to find character strings able to decrypt tickets when combined to a principal salt (i.e. find the principal’s password).

CVSS metrics

5 scores · 5 sources · 1 version

v3.18.1

EPSS trend

Probability

2.05%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.05% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-916Use of Password Hash With Insufficient Computational EffortThe product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

Affected systems

Redhat59 products

enterprise_linuxEOL7.0 | 8.0
enterprise_linux_aus8.2 | 8.4 | 8.6
enterprise_linux_eus8.8
enterprise_linux_tus8.4 | 8.6
enterprise_linux_update_services_for_sap_solutions8.4 | 8.6

bind-dyndb-ldap< 0:11.6-2.module+el8.4.0+21736+855b82c8.1 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3 | < 0:11.6-4.module+el8.6.0+21751+4d78cb83.3
bind-dyndb-ldap-debuginfo< 0:11.6-2.module+el8.4.0+21736+855b82c8.1 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3 | < 0:11.6-4.module+el8.6.0+21751+4d78cb83.3
bind-dyndb-ldap-debugsource< 0:11.6-2.module+el8.4.0+21736+855b82c8.1 | < 0:11.2-3.module+el8.2.0+21753+7109ce90.3 | < 0:11.6-4.module+el8.6.0+21751+4d78cb83.3
custodia< 0:0.6.0-3.module+el8.1.0+4098+f286395e
ipa< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-client< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-client-common< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-client-debuginfo< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-client-epn< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-client-samba< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-common< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-debuginfo< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-debugsource< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-healthcheck< 0:0.7-3.module+el8.4.0+9007+5084bdd8 | < 0:0.4-4.module+el8.2.0+5489+95477d9f | < 0:0.7-10.module+el8.6.0+14292+18b36d36
ipa-healthcheck-core< 0:0.7-3.module+el8.4.0+9007+5084bdd8 | < 0:0.4-4.module+el8.2.0+5489+95477d9f | < 0:0.7-10.module+el8.6.0+14292+18b36d36
ipa-idoverride-memberof< 0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-idoverride-memberof-plugin< 0:0.0.4-6.module+el8.1.0+4098+f286395e
ipa-python-compat< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-selinux< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server-common< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server-debuginfo< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server-dns< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server-trust-ad< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.6.8-5.el7_9.17 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
ipa-server-trust-ad-debuginfo< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
opendnssec< 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 | < 0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debuginfo< 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 | < 0:1.4.14-1.module+el8.1.0+4098+f286395e
opendnssec-debugsource< 0:2.1.7-1.module+el8.4.0+9007+5084bdd8 | < 0:1.4.14-1.module+el8.1.0+4098+f286395e
python-jwcrypto< 0:0.5.0-1.module+el8.1.0+4098+f286395e
python-kdcproxy< 0:0.4-5.module+el8.2.0+4691+a05b2456
python-qrcode< 0:5.1-12.module+el8.1.0+4098+f286395e
python-yubico< 0:1.3.2-9.module+el8.1.0+4098+f286395e
python2-ipaclient< 0:4.6.8-5.el7_9.17
python2-ipalib< 0:4.6.8-5.el7_9.17
python2-ipaserver< 0:4.6.8-5.el7_9.17
python3-custodia< 0:0.6.0-3.module+el8.1.0+4098+f286395e
python3-ipaclient< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
python3-ipalib< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
python3-ipaserver< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.8.4-14.module+el8.2.0+21961+a256f806.4 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
python3-ipatests< 0:4.9.2-10.module+el8.4.0+21873+4ff9a319.1 | < 0:4.9.8-11.el9_0.3 | < 0:4.9.8-13.module+el8.6.0+21955+ab62831e.1
python3-jwcrypto< 0:0.5.0-1.module+el8.1.0+4098+f286395e
python3-kdcproxy< 0:0.4-5.module+el8.2.0+4691+a05b2456
python3-pyusb< 0:1.0.0-9.module+el8.1.0+4098+f286395e
python3-qrcode< 0:5.1-12.module+el8.1.0+4098+f286395e
python3-qrcode-core< 0:5.1-12.module+el8.1.0+4098+f286395e
python3-yubico< 0:1.3.2-9.module+el8.1.0+4098+f286395e
pyusb< 0:1.0.0-9.module+el8.1.0+4098+f286395e
slapi-nis< 0:0.56.6-2.1.module+el8.4.0+12579+0538eac8 | < 0:0.56.3-3.module+el8.2.0+10782+8facb0b2 | < 0:0.60.0-1.module+el8.6.0+16878+6c033536
slapi-nis-debuginfo< 0:0.56.6-2.1.module+el8.4.0+12579+0538eac8 | < 0:0.56.3-3.module+el8.2.0+10782+8facb0b2 | < 0:0.60.0-1.module+el8.6.0+16878+6c033536
slapi-nis-debugsource< 0:0.56.6-2.1.module+el8.4.0+12579+0538eac8 | < 0:0.56.3-3.module+el8.2.0+10782+8facb0b2 | < 0:0.60.0-1.module+el8.6.0+16878+6c033536
softhsm< 0:2.6.0-5.module+el8.4.0+10227+076cd560 | < 0:2.4.0-4.module+el8.2.0+5779+a38c524f
softhsm-debuginfo< 0:2.6.0-5.module+el8.4.0+10227+076cd560 | < 0:2.4.0-4.module+el8.2.0+5779+a38c524f
softhsm-debugsource< 0:2.6.0-5.module+el8.4.0+10227+076cd560 | < 0:2.4.0-4.module+el8.2.0+5779+a38c524f
softhsm-devel< 0:2.6.0-5.module+el8.4.0+10227+076cd560 | < 0:2.4.0-4.module+el8.2.0+5779+a38c524f

Show all 59

Debian1 product

freeipaAll versions (No fix recorded) | < 4.12.2-1

Ubuntu1 product

freeipaAll versions (No fix recorded)

3 vendors · 61 products

References

23 links

access.redhat.com/errata/RHSA-2024:3754Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2024:3755Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2024:3756Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3757Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2024:3758Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3759Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2024:3760Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3761Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2024:3775Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/security/cve/CVE-2024-3183VDB EntryX Refsource REDHATREPORTVendor Advisory

Show all 23 references

bugzilla.redhat.com/show_bug.cgi?id=2270685Issue TrackingX Refsource REDHATREPORTVendor Advisory
www.freeipa.org/release-notes/4-12-1.htmlARTICLERelease Notes
lists.fedoraproject.org/archives/…X Transferred
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3756.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2024-3183AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2024-3183Advisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3758.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3760.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3761.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3775.jsonAdvisory
ubuntu.com/security/CVE-2024-3183REPORT
security-tracker.debian.org/tracker/CVE-2024-3183Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities