PT-2026-104188 · Apache · Apache Directory Ldap Api

·

CVE-2026-103885

·

Published

2026-10-02

·

Updated

2026-10-02

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.
A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers.
This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.
Users are recommended to upgrade to version 2.1.9, which fixes the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-103885

Affected Products

Apache Directory Ldap Api