Red Hat Security Advisory

RHSA-2012:1139

bind-dyndb-ldap security update

Released 2012-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) bind-dyndb-ldap-1.1.0-0.9.b1.el6_3.1
Red Hat Enterprise Linux Workstation (v. 6) bind-dyndb-ldap-1.1.0-0.9.b1.el6_3.1

Fixes 1 record

TI-2012-02958 CVE-2012-3429 · GHSA-m6m8-g76c-567c

The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and…

LOW 28

The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of se…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03072 Published 2012-08-07 Fixed CWE-20