Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-2134

bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query for zone served by bind-dyndb-ldap

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.

CVSS 2.0 · 4.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Martin Nagy Redhat
Products
Bind-dyndb-ldap Enterprise Linux
CVE-2012-3429

bind-dyndb-ldap: named DoS via DNS query with $ in name

The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Martin Nagy Redhat
Products
Bind-dyndb-ldap Enterprise Linux