CVE-2013-0336: The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory serv...

Security readout for executives and security teams

CVE-2013-0336 is a denial-of-service flaw in older FreeIPA directory server password-change handling. A remote request missing expected identity information could crash the service, potentially disrupting authentication-dependent business systems. Exposure is most likely in organizations still running FreeIPA earlier than 3.2.0 where directory services are network-reachable. The source bundle does not identify specific distributions, package versions, or supported product branches. Treat as a service availability risk, especially if FreeIPA backs production authentication. Prioritize remediation for internet-exposed or broadly reachable directory services; otherwise handle through normal vulnerability management. Mitigation focus: Upgrade FreeIPA to 3.2.0 or later where applicable.; Review Red Hat and FreeIPA guidance for affected package fixes.; Restrict network access to FreeIPA and directory server services..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.