一、漏洞详情
windows lightweight directory access protocol (ldap)是一种基于ldap协议的轻量级目录访问协议，广泛用于windows active directory (ad)环境中，用来访问和管理目录服务信息。
近日，监测到windows lightweight directory access protocol拒绝服务漏洞（cve-2024-49113）。windows ldap服务的wldap32.dll中存在越界读取漏洞，攻击者可以通过未认证的特制dce/rpc调用（或通过其他方式）诱使目标服务器（作为 ldap 客户端）向攻击者控制的恶意 ldap 服务器发起查询请求，当恶意服务器返回特制的、恶意构造的ldap响应时，可能触发目标服务器中的越界读取漏洞，从而导致拒绝服务（引发lsass服务崩溃，导致目标系统自动重启，造成服务中断）或信息泄露（导致内存中敏感信息，如凭据、会话数据被泄露）。
建议受影响用户做好资产自查以及预防工作，以免遭受黑客攻击。
二、影响范围
windows server 2008 for 32-bit systems service pack 2 (server core installation)
windows server 2012 r2 (server core installation)
windows server 2012 r2
windows server 2012 (server core installation)
windows server 2012
windows server 2008 r2 for x64-based systems service pack 1 (server core installation)
windows server 2008 r2 for x64-based systems service pack 1
windows server 2008 for x64-based systems service pack 2 (server core installation)
windows server 2008 for x64-based systems service pack 2
windows server 2008 for 32-bit systems service pack 2
windows server 2016 (server core installation)
windows server 2016
windows 10 version 1607 for x64-based systems
windows 10 version 1607 for 32-bit systems
windows 10 for x64-based systems
windows 10 for 32-bit systems
windows server 2025
windows 11 version 24h2 for x64-based systems
windows 11 version 24h2 for arm64-based systems
windows server 2022, 23h2 edition (server core installation)
windows 11 version 23h2 for x64-based systems
windows 11 version 23h2 for arm64-based systems
windows server 2025 (server core installation)
windows 10 version 22h2 for 32-bit systems
windows 10 version 22h2 for arm64-based systems
windows 10 version 22h2 for x64-based systems
windows 11 version 22h2 for x64-based systems
windows 11 version 22h2 for arm64-based systems
windows 10 version 21h2 for x64-based systems
windows 10 version 21h2 for arm64-based systems
windows 10 version 21h2 for 32-bit systems
windows server 2022 (server core installation)
windows server 2022
windows server 2019 (server core installation)
windows server 2019
windows 10 version 1809 for x64-based systems
windows 10 version 1809 for 32-bit systems
三、修复建议
目前微软已发布该漏洞的安全更新，受影响的用户可及时修复。
