Apache YuniKorn 1.9.0 LDAP Group Provider Denial of Service

Apache YuniKorn versions 1.8.0 and 1.9.0 contain an LDAP group provider denial of service vulnerability that causes a resolver panic when a memberOf attribute lacks "CN=". !/usr/bin/env bash Apache YuniKorn 1.9.0 LDAP Group Provider Panic Denial of Service Vendor: The Apache Software Foundation...

CVE-2026-78243 Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record...

CVE-2026-78243 Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record...

CVE-2026-78243

Apache YuniKorn versions 1.8.0 and later are vulnerable to a crash condition when configured with the LDAP group resolver . The root cause is an out of bounds read occurring during the processing of group membership entries. Specifically, if the LDAP server returns a memberOf attribute for a user...