← CVE Intelligence

CVE-2026-73198

Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read PUBLISHED

Description (CNA)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial of service (DoS) condition.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:4.13.4-1.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:4.12.2-15.el10_0.7 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020261007071200.143e9e98 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020261007070536.823393f5 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020261007080925.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020261007071832.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020261007080925.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020261007071832.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.13.4-1.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:4.10.1-12.el9_2.7 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:4.11.0-15.el9_4.9 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:4.12.2-14.el9_6.8 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unaffected

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.