Bind DynDB LDAP 'bind-dyndb-ldap' Package Remote Denial of Service Vulnerability

Bugtraq ID:	53236
Class:	Unknown
CVE:	CVE-2012-2134
Remote:	Yes
Local:	No
Published:	Apr 24 2012 12:00AM
Updated:	Apr 13 2015 08:24PM
Credit:	Red Hat Security Response Team
Vulnerable:	Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Bind DynDB LDAP bind-dyndb-ldap 0
Not Vulnerable:

Bind DynDB LDAP 'bind-dyndb-ldap' Package Remote Denial of Service Vulnerability

Bind DynDB LDAP 'bind-dyndb-ldap' Package is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the application to crash, denying service to legitimate users.

Bind DynDB LDAP 'bind-dyndb-ldap' Package Remote Denial of Service Vulnerability

An attacker can use readily available network utilities.

Bind DynDB LDAP 'bind-dyndb-ldap' Package Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

Bind DynDB LDAP 'bind-dyndb-ldap' Package Remote Denial of Service Vulnerability

References:

• Bind DynDB LDAP Homepage ( Bind DynDB LDAP)
  
• (CVE-2012-2134) CVE-2012-2134 bind-dyndb-ldap: Bind DoS (named hang) by processi (Jan Lieskovsky)
  
• CVE Request -- bind-dyndb-ldap: Bind DoS (named hang) by processing DNS query fo (Jan iankko Lieskovsky)