Launchpad.net

CVE 2016-5414

FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.

See the CVE page on Mitre.org for more details.