bind-dyndb-ldap: named assertion failure [LWN.net]

Package(s):

bind-dyndb-ldap

CVE #(s):

CVE-2012-3429

Created:

August 3, 2012

Updated:

August 17, 2012

Description:

From the Red Hat advisory:

A flaw was found in the way bind-dyndb-ldap performed the escaping of names from DNS requests for use in LDAP queries. A remote attacker able to send DNS queries to a named server that is configured to use bind-dyndb-ldap could use this flaw to cause named to exit unexpectedly with an assertion failure.

Alerts:

Red Hat	RHSA-2012:1139-01	2012-08-03
CentOS	CESA-2012:1139	2012-08-03
Oracle	ELSA-2012-1139	2012-08-03
Scientific Linux	SL-bind-20120803	2012-08-03
Fedora	FEDORA-2012-11464	2012-08-17
Fedora	FEDORA-2012-11470	2012-08-17

(Log in to post comments)