Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-73199: A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (LDAP) extended operation. By omitting the request value for the `JOIN_OID` in the `ipa-enrollment` extended operation, an attacker can trigger a server crash, potentially causing a denial of service. CVE-2026-73196: A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a denial of service, degrading the availability of the IPA service.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | ipa-client | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-client-common | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-common | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-debuginfo | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-python-compat | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-server | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-server-common | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-server-dns | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | ipa-server-trust-ad | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | python2-ipaclient | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | python2-ipalib | 0:4.6.8-5.amzn2.17.10 |
| Amazon Linux · 2 | python2-ipaserver | 0:4.6.8-5.amzn2.17.10 |
Vulnerabilities 2
-
Medium 6.5
Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value
A flaw was found in the `ipa-enrollment` SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol (LDAP) extended operation. By omitting the request value for…
-
Medium 4.3
Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding
A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU …