Security Vulnerabilities fixed in Network Policy Server RADIUS implementation MS16-021

Description

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could cause denial of service on a Network Policy Server (NPS) if an attacker sends specially crafted username strings to the NPS, which could prevent RADIUS authentication on the NPS.

Affected Applications

Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2

CVE References

Other References