CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

Summary by Cyber Security News7 Oct 2026, 09:06 CET

About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/83

Posted by Wilfred Spiegelenburg on Oct 07 Severity: CVSS 4.0: 2.1 (low) CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:N/AU:N/R:A/V:D/RE:H/U:Green Affected versions: - Apache YuniKorn 1.8.0 before 1.10.0 Description: Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user…

Read the full article at oss-security →

Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Post-Quantum Cryptography Part 2: 2030 Is Not the Deadline

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

A Hybrid Approach for Automated Security Pattern Recovery

PIMROP: A Feasibility Study of Return-Oriented Programming on Commercial Processing-in-Memory Architectures

Towards Early Warning of Real-World Vulnerabilities: An Evidence-Aware Decoupled Method for CVSS Vector Prediction Based on Unstructured Disclosures

CVE-2026-109518: RCE in apt(1) (DSA 6607-1)