CVE-2012-2134: Martin Nagy BIND-Dyndb-LDAP

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP query errors, which allows remote attackers to cause a denial of service (infinite loop and named server hang) via a non-alphabet character in the base DN in an LDAP search DNS query.

Affected products

• Martin Nagy BIND-Dyndb-LDAP: up to and including 1.1.0; version 0.1.0 only; version 0.2.0 only; version 1.0.0 only; version 1.1.0 only

Published 2014-02-26. Last modified 2026-06-16.