quot; character in a DN in a DNS query." /> quot; character in a DN in a DNS query." /> quot; character in a DN in a DNS query." />

VULNERABILITY INTELLIGENCE

CVE-2012-3429

CVSS score5 NONE
EPSS probability3.07%
CISA KEVNot currently listed
Published2012-08-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "

GotRooted — CVE & Exploit Database

Search and browse CVEs and exploits across Exploit-DB, GitHub, Rapid7, Metasploit, CXSecurity, and more. Real-time EPSS predictions, severity scoring, and CISA KEV status enrichment.

GotRooted aggregates vulnerability data from multiple sources including the National Vulnerability Database (NVD), Exploit-DB, Metasploit, Rapid7, CXSecurity, Sploitus, and the CISA Known Exploited Vulnerabilities (KEV) catalog. Each CVE is enriched with EPSS (Exploit Prediction Scoring System) scores from FIRST.org, CVSS severity ratings, and real-world exploit references. Use our search to find specific vulnerabilities, browse recent CVEs, or check the latest EPSS predictions to prioritize patching.

400k+
CVEs Indexed
46k+
Exploits
Real-time
EPSS Scores

Loading application…

quot; character in a DN in a DNS query.

Weakness classification

  • nvd@nist.gov: CWE-20

Primary references