Vulnerability-Lookup

Bundle

PoC LDAPNightmare: The CVE Mix-Up (as noted by @wdormann@infosec.exchange)

Created on 2025-01-02 22:00, updated on 2025-01-02 22:04, by Cédric Bonhomme

References

Description

A PoC for CVE-2024-49113 titled “Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability.” is provided by SafeBreach.

However, there was confusion between CVE-2024-49113 (DoS) and CVE-2024-49112 (RCE - CVSS 9.8), as noted by @wdormann@infosec.exchange:

https://github.com/SafeBreach-Labs/CVE-2024-49113/commit/eb76381b2927ce78c86743267d898b4ebfcbb187

Vulnerabilities included in this bundle

Meta

[
  {
    "ref": [
      "https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49113/",
      "https://infosec.exchange/@wdormann/113760656970284159",
      "https://infosec.exchange/@wdormann/113760610915798924",
      "https://github.com/SafeBreach-Labs/CVE-2024-49113"
    ]
  }
]

Combined detection rules

Detection rules are retrieved from Rulezet.

Combined sightings

Sightings 206 total Exploited: 3 Published Proof of Concept: 41 Seen: 162

Author	Vulnerability	Source	Type	Date