Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ...
GHSA-m6vw-rcwj-pg9q
A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service.
RLSA-2026:83460
Critical: idm:DL1 security, bug fix, and enhancement update
RLSA-2026:72279
Critical: ipa security, bug fix, and enhancement update
RLSA-2026:70564
Critical: ipa security, bug fix, and enhancement update
ELSA-2026-83460
ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-72279
ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-70564
ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL)
ALT-PU-2026-18151
ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-73197 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-73197 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-73197 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-73197 A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
GHSA-m6vw-rcwj-pg9q A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increased memory usage, slower request handling, and potential service disruption or denial of service. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
RLSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update | 26 дней назад | |||
RLSA-2026:72279 Critical: ipa security, bug fix, and enhancement update | около 1 месяца назад | |||
RLSA-2026:70564 Critical: ipa security, bug fix, and enhancement update | около 2 месяцев назад | |||
ELSA-2026-83460 ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL) | 26 дней назад | |||
ELSA-2026-72279 ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL) | около 1 месяца назад | |||
ELSA-2026-70564 ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL) | около 2 месяцев назад | |||
ALT-PU-2026-18151 ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3 | CVSS3: 9.8 | 25 дней назад |
Уязвимостей на страницу