« Volver al listado

CVE-2012-2134

Estado: ModificadaMedia (4.3)—

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Martin Nagy — Bind-dyndb-ldap

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-2134",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-02-26T15:55:08.877",
  "references": [
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-0683.html",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/48901",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/24/15",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.osvdb.org/81619",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=815846",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://www.redhat.com/archives/freeipa-users/2012-April/msg00144.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-0683.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48901",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/04/24/15",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/81619",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=815846",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://git.fedorahosted.org/cgit/bind-dyndb-ldap.git/tree/NEWS",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.redhat.com/archives/freeipa-users/2012-April/msg00144.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query."
    },
    {
      "lang": "es",
      "value": "La función handle_connection_error en ldap_helper.c en bind-dyndb-ldap anterior a 1.1.0rc1 no maneja debidamente los errores de consulta LDAP, lo que permite a atacantes remotos causar una denegación de servicios (bucle infinito y cuelgue del servidor nombrado) a través de un caracter no alfabético en la base DN en una consulta DNS de una búsqueda LDAP."
    }
  ],
  "lastModified": "2026-06-16T23:41:03.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:*:b2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E6CA1920-6C70-4875-ADED-1F15A4F2A8BB",
              "versionEndIncluding": "1.1.0"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:0.1.0:a1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6EAFBB42-05EE-44DB-85D4-D622C2B678E4"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:0.1.0:b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5745D406-24EF-408D-8A57-2AEEB09FF41C"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:0.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA5463AE-3E88-4824-AB42-93B5E6FE8573"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:1.0.0:b1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8BA67DA-D03F-499E-8BCF-94C06A814383"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:1.0.0:rc1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FA76B53-60B9-40D9-A1FC-41FE6CED3148"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:1.1.0:a1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00063DB2-31C6-4580-AB99-72466B3FB33A"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:1.1.0:a2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "374C3768-2379-4F82-8826-0B3EC53DA38C"
            },
            {
              "criteria": "cpe:2.3:a:martin_nagy:bind-dyndb-ldap:1.1.0:b1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E72C8313-8F0F-4826-B96D-2B08685521C4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}