Vulnerabilitymedium
Win-DDoS: Attackers can turn public domain controllers into DDoS agents
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-49113 | Unauthenticated LDAP Denial-of-Service in Microsoft Windows | 7.5 | 83% | ||
| CVE-2025-26673 | Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network | 7.5 | 2% | ||
| CVE-2025-32724 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network | 7.5 | 2% | ||
| CVE-2025-49716 | Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network | 7.5 | 1% | ||
| CVE-2025-49722 | Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network | 5.7 | <1% |
From the original article
3 min read at helpnetsecurity.com
SafeBreach researchers have released details on several vulnerabilities that could be exploited by attackers to crash Windows Active Directory domain controllers (DCs), one one of which (CVE-2025-32724) can also be leveraged to force public DCs to participate in distributed denial-of-service (DDoS) attacks.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.