Unscored severity · published Apr 9, 2013
CVE-2013-1282
The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services…
–
CVSS
27%
EPSS
No
On KEV
Description
The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote attackers to cause a denial of service (memory consumption and service outage) via a crafted query, aka "Memory Consumption Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)27.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Active Directory · Microsoft
All versions, or not specified · source: NVD
AD
Active Directory Application Mode · Microsoft
All versions, or not specified · source: NVD
AD
Active Directory Lightweight Directory Service · Microsoft
All versions, or not specified · source: NVD
AD
Active Directory Services · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1282
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1282
US Government Resource
http://www.us-cert.gov/ncas/alerts/TA13-100A
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-032
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16463
More from Active Directory
8.8
CVE-2022-26923
Active Directory Domain Services Elevation of Privilege Vulnerability
7.5
CVE-2021-42287
Active Directory Domain Services Elevation of Privilege Vulnerability
7.5
CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability