← Back

CVE-2016-3226

nvd nist
Published: Jun 16, 2016Modified: May 6, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (service hang) by creating many machine accounts, aka "Active Directory Denial of Service Vulnerability."

Affected (5)

Microsoft
2 products
Windows Server 2008
Windows Server 2012
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Windows Server 2012
Version r2
Windows Server 2012
Version r2
Windows Server 2012
Version r2

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.