PT-2026-104168 · Apache · Apache Directory Ldap Api

CVE-2026-103552

Published

2026-10-02

Updated

2026-10-02

CVSS v3.1

7.3

High

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Stack Overflow vulnerability in Apache Directory LDAP API.

Before binding, a client can send a deeply nested search filter that overflows the stack in the server's decoder.

This issue affects Apache Directory LDAP API: from 1.2.0 before 1.2.9.

Users are recommended to upgrade to version 1.2.9, which fixes the issue.

Fix

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-103552

Apache Directory Ldap Api