This vulnerability involves allocation of resources without limits or throttling in the FreeIPA component of Red Hat Enterprise Linux 10. An attacker can exploit it by sending oversized form POST requests to the /ipa/migration/migration.py endpoint, forcing the server to consume excessive memory and degrade service availability. The issue results in a denial of service condition due to resource exhaustion. The vulnerability is unauthenticated and remotely exploitable over the network. Red Hat has published an advisory describing mitigation steps but has not confirmed an official patch or fix at this time.

The impact is a denial of service caused by excessive memory consumption and slower request processing when the vulnerable endpoint processes large request bodies. There is no confidentiality or integrity impact reported. The vulnerability can disrupt service availability for users relying on the FreeIPA migration functionality.

Red Hat's advisory recommends disabling the /ipa/migration endpoint if it is not required by removing or commenting out the Alias and Directory configuration blocks in the Apache configuration file (e.g., /etc/httpd/conf.d/ipa.conf). Alternatively, administrators can limit the size of request bodies processed by this endpoint by adding the LimitRequestBody directive within the relevant Apache Directory block, setting a conservative limit such as 1 MiB (1048576 bytes). After configuration changes, the httpd service must be reloaded or restarted. No official patch or fix is currently confirmed; patch status is not yet confirmed — check the vendor advisory for current remediation guidance.