CVE-2025-61912

CVE-2025-61912 affects python-ldap versions prior to 3.4.5, where the ldap.dn.escape_dn_chars() function incorrectly escapes null bytes (\x00). This flaw allows an attacker to craft malicious input that, when processed by applications using this helper, can cause a client-side denial of service by consistently failing before sending requests to an LDAP server. Rated as Medium severity (CVSS 5.3), this vulnerability has a network attack vector and low attack complexity, requiring no user interaction or privileges. The primary impact is a loss of availability (A:L) for affected client applications. There is currently no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept codes available (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage for this CVE are also minimal.