CVE-2026-73197

Katalog CVE

CVSS 7.5 · High EPSS 0,43%

Kerentanan Allocation of Resources Without Limits or Throttling pada redhat enterprise linux, freeipa. Skor CVSS 3.1 7.5 (High) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.

Rincian

Terbit di NVD

20 Agustus 2026

Terakhir diubah

28 September 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber redhat.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-73197 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2474697 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:70564
• https://access.redhat.com/errata/RHSA-2026:72279