CVE-2026-103552

7.3 Élevée

Publiée le 02/10/2026 à 12:17 · Modifiée le 03/10/2026 à 00:16 · Analyse NVD reportée · Source : security@apache.org

Description

Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search filter that overflows the stack in the server's decoder. This issue affects Apache Directory LDAP API: from 1.2.0 before 1.2.9. Users are recommended to upgrade to version 1.2.9, which fixes the issue.

Traduire en français

Produits concernés

Apache Software Foundation Apache Directory LDAP API

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.3 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-121

Références

https://lists.apache.org/thread.html/fn3bwknn57266hx66w9vv6b4k8rfwcx7
http://www.openwall.com/lists/oss-security/2026/10/02/4

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories