CVE-2025-61912

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61912
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61912.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61912
Aliases
Downstream
AZL (2)
CGA (2)
DEBIAN (1)
ECHO (1)
OESA (6)
openSUSE (2)
SUSE (3)
UBUNTU (1)
Related
openSUSE (2)
SUSE (3)
Published
2025-10-10T22:04:25Z
Modified
2026-10-24T02:30:55Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination
Details

python-ldap is a lightweight directory access protocol (LDAP) client API for Python. In versions prior to 3.4.5, ldap.dn.escape_dn_chars() escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP server (e.g., AD), resulting in a client-side denial of service. Version 3.4.5 contains a patch for the issue.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-116",
        "CWE-170"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61912.json"
}
References

Affected packages

Git / github.com/python-ldap/python-ldap

Affected ranges

Type
GIT
Repo
https://github.com/python-ldap/python-ldap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
bf666e918615b00dbcd1bbe71542522eedfdffc1
Fixed
6ea80326a34ee6093219628d7690bced50c49a3f
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:python-ldap:python-ldap:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "3.4.5"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "range":  [
                {
                    "fixed":  "6ea80326a34ee6093219628d7690bced50c49a3f"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "python-ldap-3.4.5",
            "range":  [
                {
                    "fixed":  "bf666e918615b00dbcd1bbe71542522eedfdffc1"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

python-ldap-2.*
python-ldap-2.3.0
python-ldap-2.3.10
python-ldap-2.3.11
python-ldap-2.3.13
python-ldap-2.3.3
python-ldap-2.3.4
python-ldap-2.3.7
python-ldap-2.3.8
python-ldap-2.3.9
python-ldap-2.4.10
python-ldap-2.4.12
python-ldap-2.4.13
python-ldap-2.4.20
python-ldap-2.4.21
python-ldap-2.4.23
python-ldap-2.4.26
python-ldap-2.4.27
python-ldap-2.4.28
python-ldap-2.4.29
python-ldap-2.4.30
python-ldap-2.4.31
python-ldap-2.4.32
python-ldap-2.4.33
python-ldap-2.4.35
python-ldap-2.4.36
python-ldap-2.4.37
python-ldap-2.4.38
python-ldap-2.4.39
python-ldap-2.4.4
python-ldap-2.4.40
python-ldap-2.4.41
python-ldap-2.4.42
python-ldap-2.4.43
python-ldap-2.4.44
python-ldap-2.4.45
python-ldap-2.4.6
python-ldap-2.4.7
python-ldap-2.4.9
python-ldap-2.5.0
python-ldap-2.5.1
python-ldap-3.*
python-ldap-3.0.0
python-ldap-3.0.0b1
python-ldap-3.0.0b2
python-ldap-3.0.0b3
python-ldap-3.0.0b4
python-ldap-3.1.0
python-ldap-3.2.0
python-ldap-3.3.0
python-ldap-3.4.0
python-ldap-3.4.1
python-ldap-3.4.2
python-ldap-3.4.3
python-ldap-3.4.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61912.json"