AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2012-3429

MEDIUM · CVSS 5 EPSS 3.07%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-08-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2012-3429
Severity
MEDIUM
CVSS
5
EPSS
3.07%

Original NVD Description

The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.