Yüksek CVSS 7.5
CVE-2026-103885: CVE-2026-103885: denetimsiz kaynak tüketimi
Açıklama (NVD)
Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when processing some badly crafted Telephone Numbers. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. Users are recommended to upgrade to version 2.1.9, which fixes the issue.
Özet bilgiler
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,43 (yüzdelik 38)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor