EUVD-2025-17789
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3Tags
Description
Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
Analysis
Windows Local Security Authority Subsystem Service (LSASS) contains an uncontrolled resource consumption vulnerability that allows unauthenticated remote attackers to cause a denial of service. Crashing or degrading LSASS disrupts all authentication and authorization on the affected Windows server, effectively taking the system offline.
Technical Context
LSASS handles all authentication and authorization decisions on Windows systems. An uncontrolled resource consumption flaw allows a remote attacker to exhaust LSASS resources, causing the service to become unresponsive. When LSASS fails, the system cannot process logons, validate Kerberos tickets, or enforce security policies, effectively denying all access to the machine.
Affected Products
['Windows Server (multiple versions)', 'Windows Desktop (multiple versions)']
Remediation
Apply the Microsoft security update. Implement network segmentation to restrict access to LSASS-exposed ports on domain controllers. Monitor LSASS resource usage for anomalies. Ensure multiple domain controllers for redundancy.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today