This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Microsoft fixes 2 vulnerabilities in Windows LDAP
As part of the December "Patch Tuesday", Microsoft fixes 71 vulnerabilities, including a critical and a high-severity vulnerability affecting Windows LDAP [1]. Fixes for these two vulnerabilities affecting individual Microsoft products can be found at [2][3].
Allows an unauthenticated remote attacker to execute code. As a temporary workaround, the domain controller can be placed in a network without public access and access to RPC from untrusted networks can be blocked [2].
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-49112 at cve.org, NVD
- CWE-190: Integer Overflow or Wraparound at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
Allows an unauthenticated remote attacker to perform a DoS attack [3]. A detailed description of the vulnerability can be found at [4] and a PoC at [5]. According to its authors, the PoC can be extended to achieve remote code execution (CVE-2024-49112) [4].
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-49113 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
Links
- [1] https://news.sophos.com/en-us/2024/12/11/december-patch-tuesday-arrives-bearing-71-gifts/
- [2] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49112
- [3] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49113
- [4] https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-CVE-2024-49113/
- [5] https://github.com/SafeBreach-Labs/CVE-2024-49113
By CESNET, z.s.p.o. Martin Krajči on 6. 1. 2025.