Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-2134HistoryFeb 26, 2014 - 3:55 p.m.
CVE-2012-2134
2014-02-2615:55:08
Debian Security Bug Tracker
security-tracker.debian.org
6
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.4%
The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | bind-dyndb-ldap | < 11.10-6 | bind-dyndb-ldap_11.10-6_all.deb |
Related
nessus
nessus
Fedora 16 : bind-dyndb-ldap-1.1.0-0.11.rc1.fc16 (2012-6722)
2012-05-16 00:00:00
Fedora 17 : bind-dyndb-ldap-1.1.0-0.11.rc1.fc17 (2012-6666)
2012-05-29 00:00:00
RHEL 6 : bind-dyndb-ldap (RHSA-2012:0683)
2012-05-22 00:00:00
openvas
openvas
Fedora Update for bind-dyndb-ldap FEDORA-2012-6722
2012-05-17 00:00:00
Fedora Update for bind-dyndb-ldap FEDORA-2012-6666
2012-08-30 00:00:00
Fedora Update for bind-dyndb-ldap FEDORA-2012-6722
2012-05-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:51:30
fedora
fedora
[SECURITY] Fedora 17 Update: bind-dyndb-ldap-1.1.0-0.11.rc1.fc17
2012-05-26 07:58:21
[SECURITY] Fedora 16 Update: bind-dyndb-ldap-1.1.0-0.11.rc1.fc16
2012-05-15 23:24:40
[SECURITY] Fedora 15 Update: bind-dyndb-ldap-1.1.0-0.11.rc1.fc15
2012-05-15 23:24:57
redhat
redhat
(RHSA-2012:0683) Important: bind-dyndb-ldap security update
2012-05-21 00:00:00
cvelist
cvelist
CVE-2012-2134
2014-02-26 15:00:00
prion
prion
Design/Logic Flaw
2014-02-26 15:55:00
cve
cve
CVE-2012-2134
2014-02-26 15:55:08
centos
centos
bind security update
2012-05-21 22:49:33
nvd
nvd
CVE-2012-2134
2014-02-26 15:55:08
oraclelinux
oraclelinux
bind-dyndb-ldap security update
2012-05-21 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.012 Low
EPSS
Percentile
85.4%
Related for DEBIANCVE:CVE-2012-2134