CVE-2012-3429
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier...
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
Exploit likelihood
What each source reports
NVD Score used
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
- Record
CVE-2012-3429- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
- Record
CVE-2012-3429- Updated
- 2026-11-02
EUVDEUVD-2012-3396 No score
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
- Record
EUVD-2012-3396- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m6m8-g76c-567c No score
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier...
The dns_to_ldap_dn_escape function in src/ldap_convert.c in bind-dyndb-ldap 1.1.0rc1 and earlier does not properly escape distinguished names (DN) for LDAP queries, which allows remote DNS servers to cause a denial of service (named service hang) via a "$" character in a DN in a DNS query.
- Record
GHSA-m6m8-g76c-567c- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bind-dyndb-ldapRed Hat:enterprise_linux:6::server |
before 0:1.1.0-0.9.b1.el6_3.1 | 0:1.1.0-0.9.b1.el6_3.1 |
bind-dyndb-ldap-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.1.0-0.9.b1.el6_3.1 | 0:1.1.0-0.9.b1.el6_3.1 |
bind-dyndb-ldapRed Hat:enterprise_linux:6::workstation |
before 0:1.1.0-0.9.b1.el6_3.1 | 0:1.1.0-0.9.b1.el6_3.1 |
bind-dyndb-ldap-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.1.0-0.9.b1.el6_3.1 | 0:1.1.0-0.9.b1.el6_3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3429 is a medium vulnerability (CVSS 5.0) in Martin Nagy Bind-dyndb-ldap, published August 7, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.07%, the 87th percentile. Fixed in bind-dyndb-ldap 0:1.1.0-0.9.b1.el6_3.1.
References
securitytracker.com/id?1027341
git.fedorahosted.org/cgit/bind-dyndb-ldap.git/commit?id=f345805c73c294db42452ae966c48fbc36c48006
rhn.redhat.com/errata/RHSA-2012-1139.html
exchange.xforce.ibmcloud.com/vulnerabilities/77391
secunia.com/advisories/50159
Show 10 moreShow less
openwall.com/lists/oss-security/2012/08/02/5
bugzilla.redhat.com/show_bug.cgi?id=842466
securityfocus.com/bid/54787
nvd.nist.gov/vuln/detail/CVE-2012-3429
github.com/advisories/GHSA-m6m8-g76c-567c
access.redhat.com/errata/RHSA-2012:1139
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1139.json
cve.org/CVERecord?id=CVE-2012-3429