CVE-2024-49113: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Windows LDAP allows an attacker to crash the LDAP service by sending specially crafted requests, causing legitimate users to lose access to directory services. This affects systems that rely on LDAP for authentication and user management.
Out-of-bounds read vulnerability (CWE-125) in Windows LDAP protocol handler enables remote denial of service through malformed LDAP messages. The attack requires network access to an LDAP service and results in service termination, impacting availability of directory-dependent systems.
In the same product, most dangerous first.