CVE-2026-103552

EUVD-2026-91382
Stack Overflow vulnerability in Apache Directory LDAP API.



Before binding, a client can send a deeply nested search filter that overflows the stack in the server's decoder.



This issue affects Apache Directory LDAP API: from 1.2.0 before 1.2.9.



Users are recommended to upgrade to version 1.2.9, which fixes the issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
apacheCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 6.96%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
apachedirectory_ldap_api
1.2.0 ≤
𝑥
< 1.2.9
CNA
Common Weakness Enumeration
References
https://lists.apache.org/thread.html/fn3bwknn57266hx66w9vv6b4k8rfwcx7