CVE-2026-73198
EUVD-2026-6324420.08.2026, 11:16
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
| freeipa | freeipa | 𝑥 < 4.13.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| ipa-client |
| ||
| ipa-client-common |
| ||
| ipa-client-encrypted-dns |
| ||
| ipa-client-epn |
| ||
| ipa-client-samba |
| ||
| ipa-common |
| ||
| ipa-selinux |
| ||
| ipa-selinux-luna |
| ||
| ipa-selinux-nfast |
| ||
| ipa-server |
| ||
| ipa-server-common |
| ||
| ipa-server-dns |
| ||
| ipa-server-encrypted-dns |
| ||
| ipa-server-trust-ad |
| ||
| python3-ipaclient |
| ||
| python3-ipalib |
| ||
| python3-ipaserver |
| ||
| python3-ipatests |
|