CVE-2026-103885

7.5 Élevée

Publiée le 02/10/2026 à 12:17 · Modifiée le 08/10/2026 à 15:17 · Analyse NVD reportée · Source : security@apache.org

Description

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. Users are recommended to upgrade to version 2.1.9, which fixes the issue.

Traduire en français

Produits concernés

Apache Software Foundation Apache Directory LDAP API

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-400

Références

https://lists.apache.org/thread.html/wjt9p1l123v6b3zd5dg41f8lfrgy5vg9
http://www.openwall.com/lists/oss-security/2026/10/02/8

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories