← All CVEs

CVE-2013-3868

medium · 5

Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka "Remote Anonymous DoS Vulnerability."

5
CVSS
37.1%
EPSS (exploit prob.)
98th
EPSS percentile
2013-09-11
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
microsoftactive_directory_lightweight_directory_serviceall versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftwindows_server_2008all versions
microsoftactive_directory_lightweight_directory_serviceall versions
microsoftwindows_8all versions
microsoftwindows_8all versions
microsoftactive_directory_lightweight_directory_serviceall versions
microsoftwindows_7all versions
microsoftwindows_7all versions
microsoftactive_directory_lightweight_directory_serviceall versions
microsoftwindows_server_2012all versions
microsoftactive_directory_lightweight_directory_serviceall versions
microsoftwindows_vistaall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-3868