New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

🗓️ 10 Aug 2025 19:30:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 14 Views

Win-DDoS flaw weaponizes public domain controllers via LDAP and RPC to form a botnet for large DDoS.

Reporter	Title	Published	Views	Family All 216
GithubExploit	Exploit for Out-of-bounds Read in Microsoft	1 Jan 202515:48	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Microsoft	6 Jan 202511:59	–	githubexploit
GithubExploit	Exploit for Integer Overflow or Wraparound in Microsoft	1 Jan 202515:48	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Microsoft	30 Apr 202613:31	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Microsoft	15 Feb 202520:23	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Read in Microsoft	3 Jan 202507:05	–	githubexploit
BDU FSTEC	The vulnerability in the implementation of the LDAP service protocol for Microsoft Windows operating systems allows a perpetrator to cause a service failure.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a perpetrator to cause a service failure.	10 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to trigger a service failure.	17 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Netlogon service in Windows operating systems allows a hacker to trigger a service failure.	14 Jul 202500:00	–	bdu_fstec

17 Aug 2025 08:43Current

9.3High risk

Vulners AI Score9.3

CVSS 3.17.5

EPSS0.82992

SSVC

remote procedure call directory access protocol public domain controllers botnet formation referral manipulation