Linux Distros Unpatched Vulnerability : CVE-2024-2698

high Nessus Plugin ID 227907

Language:

Synopsis

The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be patched.

Description

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

- A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the forwardable flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule. (CVE-2024-2698)

Note that Nessus relies on the presence of the package as reported by the vendor.

Solution

There is no known solution at this time.

Plugin Details

Severity: High

ID: 227907

File Name: unpatched_CVE_2024_2698.nasl

Version: 1.2

Type: local

Agent: unix

Family: Misc.

Published: 3/5/2025

Updated: 8/19/2025

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:C

CVSS Score Source: CVE-2024-2698

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:centos:centos:python2-ipalib, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, p-cpe:/a:redhat:enterprise_linux:ipa-client-common, cpe:/o:centos:centos:7, p-cpe:/a:redhat:enterprise_linux:ipa-server, p-cpe:/a:redhat:enterprise_linux:python2-ipaclient, p-cpe:/a:centos:centos:ipa-server-dns, p-cpe:/a:redhat:enterprise_linux:ipa, p-cpe:/a:redhat:enterprise_linux:python2-ipalib, p-cpe:/a:redhat:enterprise_linux:ipa-client, p-cpe:/a:centos:centos:python2-ipaclient, p-cpe:/a:redhat:enterprise_linux:ipa-admintools, p-cpe:/a:debian:debian_linux:freeipa, p-cpe:/a:centos:centos:ipa-server-common, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, cpe:/o:canonical:ubuntu_linux:25.04, cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:centos:centos:ipa-admintools, p-cpe:/a:centos:centos:ipa-server, p-cpe:/a:centos:centos:ipa-client-common, p-cpe:/a:centos:centos:ipa-python, p-cpe:/a:redhat:enterprise_linux:ipa-common, p-cpe:/a:canonical:ubuntu_linux:freeipa, p-cpe:/a:redhat:enterprise_linux:ipa-server-trust-ad, p-cpe:/a:redhat:enterprise_linux:ipa-python, p-cpe:/a:centos:centos:ipa, p-cpe:/a:redhat:enterprise_linux:ipa-server-common, p-cpe:/a:centos:centos:python2-ipaserver, p-cpe:/a:redhat:enterprise_linux:ipa-python-compat, p-cpe:/a:centos:centos:ipa-python-compat, p-cpe:/a:centos:centos:ipa-client, cpe:/o:canonical:ubuntu_linux:14.04:-:lts, p-cpe:/a:centos:centos:ipa-common, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, p-cpe:/a:redhat:enterprise_linux:python2-ipaserver, p-cpe:/a:centos:centos:ipa-server-trust-ad, cpe:/o:debian:debian_linux:12.0, p-cpe:/a:redhat:enterprise_linux:ipa-server-dns

Required KB Items: Host/local_checks_enabled, Host/cpu, global_settings/vendor_unpatched, Host/OS/identifier

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 6/10/2024

Reference Information

CVE: CVE-2024-2698

Detections

Analytics