VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Feb 10, 2016· Updated May 6, 2026

CVE-2016-0050

CVE-2016-0050

Description

Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."

Affected products

6
  • Microsoft/Windows Server 20082 versions
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • Microsoft/Windows Server 20124 versions
    cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2012:-:gold:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:datacenter:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:essentials:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:standard:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.