A resource allocation vulnerability exists in FreeIPA on Red Hat Enterprise Linux 10, specifically in the /ipa/i18n_messages endpoint. An unauthenticated attacker can exploit this by sending a very large request body, causing the service to consume excessive memory and resulting in a denial of service condition. The vulnerability is classified under CWE-770 (Allocation of Resources Without Limits or Throttling). Red Hat's advisory recommends mitigating the issue by configuring Apache HTTP Server to enforce a request body size limit on the affected endpoint. There is no indication of an official patch or fix released yet, and no known exploits in the wild have been reported.

The vulnerability allows remote unauthenticated attackers to cause memory exhaustion on the FreeIPA service, leading to degraded responsiveness and denial of service. There is no impact on confidentiality or integrity reported. The primary impact is availability disruption due to resource consumption.

Red Hat recommends mitigating this issue by configuring the Apache HTTP Server to enforce a request body size limit on the /ipa/i18n_messages endpoint using the LimitRequestBody directive (e.g., LimitRequestBody 1048576 to limit to 1MB). This requires restarting the Apache service, which may temporarily affect FreeIPA availability. Additionally, if a reverse proxy or load balancer is used, it should also enforce an equivalent request body size limit. No official patch or fix is currently available; patch status is not yet confirmed — check the vendor advisory for current remediation guidance.