This vulnerability exists in the ipa-enrollment SLAPI plugin of Red Hat Enterprise Linux 10. It is triggered when a remote authenticated client sends a malformed LDAP extended operation omitting the request value for JOIN_OID in the ipa-enrollment extended operation. This leads to a null pointer dereference, causing the server process to crash and resulting in a denial of service condition. The CVSS 3.1 base score is 6.5 (medium severity) with network attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vendor advisory recommends network access restrictions and optionally disabling the vulnerable plugin. No patch or official fix information is currently provided.

The vulnerability allows a remote authenticated attacker to cause a denial of service by crashing the LDAP server process via a null pointer dereference. There is no impact on confidentiality or integrity. Availability is impacted due to the server crash. No known exploits are reported in the wild. The attack requires authentication and network access to the LDAP service.

Red Hat advises restricting network access to the LDAP service to trusted clients only by configuring firewall rules to allow connections from known IP addresses or subnets. If the ipa-enrollment functionality is not required, disabling the ipa-enrollment SLAPI plugin removes the attack surface. Patch status is not yet confirmed—check the Red Hat advisory for updates on fixes.