https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:11:07.817270+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-382209 EUVD-2026-382209 2026-10-07T10:11:07.886444+00:00 EUVD-2026-382209 https://cve.radiocsirt.org/vuln/fkie_cve-2026-103880 fkie_cve-2026-103880 2026-10-07T10:11:07.886499+00:00

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.

Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to  run for hours checking the credentials. A bounded cost should be enforced to avoid a server DOS.

This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.

Users are recommended to upgrade to version 2.1.9, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-q4px-5x5j-5p92 GHSA-q4px-5x5j-5p92 2026-10-07T10:11:07.886542+00:00

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API.

Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to  run for hours checking the credentials. A bounded cost should be enforced to avoid a server DOS.

This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9.

Users are recommended to upgrade to version 2.1.9, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-103880 UBUNTU-CVE-2026-103880 2026-10-07T10:11:07.886563+00:00

Affected: Ubuntu:16.04:LTS: apache-directory-api, Ubuntu:18.04:LTS: apache-directory-api, Ubuntu:20.04:LTS: apache-directory-api, Ubuntu:22.04:LTS: apache-directory-api, Ubuntu:24.04:LTS: apache-directory-api, Ubuntu:26.04:LTS: apache-directory-api

Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that supports this algorithm will cause the server CPU to run for hours checking the credentials. A bounded cost should be enforced to avoid a server DOS. This issue affects Apache Directory LDAP API: from 2.1.0 before 2.1.9. Users are recommended to upgrade to version 2.1.9, which fixes the issue.