A resource exhaustion vulnerability in Red Hat Directory Server enables unauthenticated remote attackers to trigger a denial-of-service condition.

This vulnerability (CWE-770) involves the allocation of resources without proper limits. An unauthenticated attacker can send crafted requests to the directory server, causing it to consume excessive resources and ultimately crash or become unresponsive.

The CVSS score of 7.5 highlights the potential for significant service disruption. As directory services are central to authentication and authorization, a successful denial-of-service attack would prevent users from accessing critical enterprise applications and infrastructure, leading to major operational downtime.

Immediate Action: Apply the relevant security errata (RHSA-2026:26452 through RHSA-2026:26459) provided by Red Hat for your specific RHEL version.

Proactive Monitoring: Monitor directory server CPU and memory usage for sudden, sustained spikes that may indicate an ongoing resource exhaustion attack.

Compensating Controls: Configure rate limiting on network devices or firewalls to restrict the volume of requests directed at the directory server.

Public Exploit Available: No (unknown)

Given the central role of directory services in enterprise security, the risk of service unavailability is high. Organizations must prioritize the application of the provided Red Hat errata to restore proper resource management and ensure the continued availability of authentication services.