CVE-2026-73199
Received Received - Intake

Null Pointer Dereference in IPA Enrollment SLAPI Plugin

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: redhat-SADP

Description
A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (LDAP) extended operation. By omitting the request value for the `JOIN_OID` in the `ipa-enrollment` extended operation, an attacker can trigger a server crash, potentially causing a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-73199
EUVD
EUVD-2026-63246

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
redhat freeipa 4.13.1-3.el10

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a null pointer dereference vulnerability in the ipa-enrollment SLAPI plugin of FreeIPA. A remote authenticated attacker can exploit it by sending a malformed LDAP extended operation without a request value for the JOIN_OID. This causes the server to crash, resulting in a denial of service.

Detection Guidance

Monitor LDAP server logs for malformed extended operations targeting the ipa-enrollment plugin. Check for crashes or errors in FreeIPA service logs when JOIN_OID requests lack request values. Use network traffic analysis tools to detect LDAP extended operations without proper request data.

Impact Analysis

The vulnerability allows an attacker to crash the FreeIPA server, disrupting services and causing downtime. It requires authenticated access and a secure LDAP connection, but no confidentiality or integrity loss is confirmed.

Compliance Impact

This vulnerability primarily impacts service availability by causing a denial of service through server crashes. It does not directly affect confidentiality or integrity of data, which are key concerns for GDPR and HIPAA. However, prolonged downtime could indirectly impact compliance by disrupting access to critical systems handling personal or health data.

Mitigation Strategies

Restrict LDAP service access to trusted clients only via firewall rules. Disable the ipa-enrollment plugin if not required. Apply input validation to reject empty or missing request values in JOIN_OID operations. Monitor for exploitation attempts in logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73199. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart