Описание
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
Меры по смягчению последствий
If the /ipa/migration endpoint is not required, it can be disabled by commenting out or removing the Alias /ipa/migration and its corresponding <Directory> block in the Apache configuration file (e.g., /etc/httpd/conf.d/ipa.conf).
Alternatively, to limit the size of request bodies processed by the /ipa/migration endpoint, add the LimitRequestBody directive within the <Directory "/usr/share/ipa/migration"> block in your Apache configuration, setting a conservative limit such as 1 MiB (1048576 bytes):
After modifying the Apache configuration, the httpd service must be reloaded or restarted for the changes to take effect. This may temporarily interrupt service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | ipa | Out of support scope | ||
| Red Hat Enterprise Linux 10 | ipa | Fixed | RHSA-2026:72279 | 28.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | ipa | Fixed | RHSA-2026:82935 | 14.10.2026 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | ipa | Fixed | RHSA-2026:93071 | 30.10.2026 |
| Red Hat Enterprise Linux 8 | idm | Fixed | RHSA-2026:83460 | 15.10.2026 |
| Red Hat Enterprise Linux 8 | idm | Fixed | RHSA-2026:83460 | 15.10.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | idm | Fixed | RHSA-2026:93452 | 02.11.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
EPSS
7.5 High
CVSS3