CVE-2026-102731

Summary

A memory allocation vulnerability in Apache Directory LDAP API allows attackers to trigger excessive heap allocations through malformed BER-encoded responses, leading to denial of service via OutOfMemoryError. This affects versions 1.2.0 through 1.2.8 and can be exploited by unauthenticated peers or MITM attackers.

Exploitability

Exploitation is relatively straightforward as attackers only need to send a small BER-encoded response that triggers a large memory allocation, with no authentication required and minimal preconditions.

Blast radius

The vulnerability can impact any server embedding Apache Directory LDAP API with default settings, potentially causing widespread service disruption with just a handful of malicious connections exhausting available heap memory.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.2.9 which fixes the excessive memory allocation issue in Apache Directory LDAP API.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.