QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2134

Published: Feb 26, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

[Freeipa-users] 20120424 named-dyndb-ldap looses connection when the LDAP server is under high load

mailing-list

x_refsource_MLIST

https://bugzilla.redhat.com/show_bug.cgi?id=815846

x_refsource_CONFIRM

https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

vdb-entry

x_refsource_OSVDB

[oss-security] 20140424 Re: CVE Request -- bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.