This vulnerability affects Oracle Unified Directory (OUD) in versions 12.2.1.4.0 and 14.1.2.1.0. It is an easily exploitable issue that permits an unauthenticated attacker with network access via LDAP to cause a hang or repeated crash, resulting in a complete denial of service (DoS). The CVSS 3.1 base score is 7.5, reflecting high impact on availability with no impact on confidentiality or integrity. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). The Oracle Critical Patch Update advisory for July 2026 references this vulnerability but does not explicitly confirm the availability of a patch or remediation details for this specific issue. Customers are urged to apply available patches promptly as part of Oracle's cumulative security updates.

Successful exploitation results in a denial of service condition by causing Oracle Unified Directory to hang or crash repeatedly. This impacts the availability of the service but does not compromise confidentiality or integrity of data. The vulnerability requires no authentication and can be triggered remotely via LDAP network access.

The vendor advisory does not explicitly confirm a patch or remediation level for this vulnerability. Oracle strongly recommends that customers remain on actively supported versions and apply all available Critical Patch Updates without delay. Patch status is not yet confirmed — check the Oracle Critical Patch Update July 2026 advisory and subsequent updates for current remediation guidance.