CVE-2017-0166 — Incorrect Calculation of Buffer Size in Corporation Ldap
Severity
8.1HIGHNVD
EPSS
1.5%
top 18.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 12
Latest updateMay 13
Description
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP Elevation of Privilege Vulnerability."
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9
Affected Packages17 packages
Patches
🔴Vulnerability Details
1GHSA▶
GHSA-39cj-3mcf-vq77: An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated↗2022-05-13