CVE Vulnerabilities

CVE-2025-27479

Insufficient Resource Pool

Published: Apr 08, 2025 | Modified: Jul 08, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.

Weakness

The product’s resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

Affected Software

Name Vendor Start Version End Version
Windows_server_2012 Microsoft - (including) - (including)
Windows_server_2012 Microsoft r2 (including) r2 (including)
Windows_server_2016 Microsoft * 10.0.14393.7969 (excluding)
Windows_server_2019 Microsoft * 10.0.17763.7136 (excluding)
Windows_server_2022 Microsoft * 10.0.20348.3453 (excluding)
Windows_server_2022_23h2 Microsoft * 10.0.25398.1551 (excluding)
Windows_server_2025 Microsoft * 10.0.26100.3775 (excluding)

Potential Mitigations

References