CVE-2026-102731
Description
A flaw was found in Apache Directory LDAP API. A malicious LDAP peer or a network attacker able to intercept the connection can send a small BER-encoded response with an excessive size value, causing the client to allocate a large amount of memory before receiving the data. This can trigger an OutOfMemoryError and denial of service. An embedding LDAP server can also be affected by unauthenticated pre-bind input if MAX_PDU_SIZE_ATTR is not set. Apache Directory LDAP API versions 1.2.0 through versions before 1.2.9 are affected; version 1.2.9 fixes the issue.
Statement
This vulnerability is rated as an Important impact for Red Hat environments because unauthenticated remote adversaries can cause complete denial of service via memory exhaustion without prior access. Deployments processing directory traffic can be forced into an out-of-memory condition when communicating with a rogue server, through intercepted network channels, or upon receiving malformed BER network packets in embedded server setups. Evaluated Red Hat offerings, including Red Hat JBoss Fuse, utilize older package versions that do not contain the vulnerable logic.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.5 | N/A | 7.5 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | None | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
