Product:
Windows LDAP
Summary
A null pointer dereference vulnerability in Windows LDAP allows an authorized attacker to cause a denial of service locally. This can lead to significant disruption of services. The issue arises from improper handling of certain requests, which can crash the service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-34339 |
Exploitation
To exploit this vulnerability, an attacker with local access can send specially crafted requests to the Windows LDAP service. By triggering the null pointer dereference, the attacker can cause the service to crash, resulting in a denial of service. This requires low privileges and does not involve user interaction.
Affected Products
- Windows LDAP – Vulnerable to null pointer dereference leading to denial of service.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to the LDAP service can help reduce the risk of exploitation. Regular monitoring and auditing of service logs can also assist in identifying potential attacks.