LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers – [email protected] (The Hacker News)

– [[{“value”:”A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition.
The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 (CVSS score: 7.5). It was addressed by Microsoft as part of Patch Tuesday updates for December 2024, alongside CVE-2024-49112 (“}]] – Read More – The Hacker News