CVE-2012-2134

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote…

published February 26, 2014

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02325 · 83.3th percentile
Published
2014-02-26T15:00Z
EPSS history
Timeline
  • 26 FEB 15:00Z
    The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote…
    cvelistv5