CVE-2025-61912CWE-116CWE-170

CVE-2025-61912

Medium · published October 11, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, ldap.dn.escape_dn_chars() escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP server (e.g., AD), resulting in a client-side denial of service. Version 3.4.5 contains a patch for the issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.8th percentile
Weaknesses
CWE-116 · Improper Encoding or Escaping of Output; CWE-170 · Improper Null Termination
Published
2025-10-11T02:15Z
Affected products (1)
ProductVersionsFixed in
python-ldap/python-ldap< 3.4.53.4.5
References (3)
https://github.com/python-ldap/python-ldap/security/advisories/GHSA-p34h-wq7j-h5v6 · [email protected]https://github.com/python-ldap/python-ldap/commit/6ea80326a34ee6093219628d7690bced50c49a3f · [email protected]https://github.com/python-ldap/python-ldap/releases/tag/python-ldap-3.4.5 · [email protected]
EPSS history
Timeline
  • 10 OCT 22:04Z
    python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
    cvelistv5