← CVE Intelligence

CVE-2026-73197

Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read PUBLISHED

Description (CNA)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:4.13.4-1.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:4.12.2-15.el10_0.7 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020261007071200.143e9e98 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020261007070536.823393f5 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020261007080925.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020261007071832.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020261007080925.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020261007071832.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.13.4-1.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:4.10.1-12.el9_2.7 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:4.11.0-15.el9_4.9 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:4.12.2-14.el9_6.8 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7affected

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.