---
id: 5816
title: "[CVE-2024-49113] LDAPNightmare Explained"
cve: CVE-2024-49113
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/ldapnightmare-explained/"
published_at: "2025-01-13T21:04:21Z"
tags: ["rce", "denial-of-service", "windows", "vulnerability", "domain-controller", "ldapnightmare", "cve-2024-49113", "safebreach"]
phying_url: "https://phying.com/item/5816"
lang: en
---

# [CVE-2024-49113] LDAPNightmare Explained

## Summary

LDAPNightmare, a SafeBreach Labs proof of concept for CVE-2024-49113, coaxes a Windows host, including a domain controller, into crashing via crafted LDAP responses from an attacker-controlled server.

## Intelligence Metadata

- **Sources:** semperis.com
- **CVE:** CVE-2024-49113
- **Published:** 2025-01-13T21:04:21Z
- **Original:** https://www.semperis.com/blog/ldapnightmare-explained/
- **Phying News:** https://phying.com/item/5816