CVE-2013-3868
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
11/09/2013
Last modified:
11/04/2025
Description
Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka "Remote Anonymous DoS Vulnerability."
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* | ||
| cpe:2.3:a:microsoft:active_directory_lightweight_directory_service:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page