A flaw was found in Apache Directory LDAP API. An unauthenticated remote attacker can cause a Denial of Service (DoS) by submitting a deeply nested search filter before authenticating (binding) with the server. Processing this filter triggers a stack overflow in the server decoder, resulting in an application crash.
Last checked: 2026-10-03 00:12 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-02 18:29 UTC)
Fix evidence last checked: 2026-10-05 09:11 UTC