CVE-2019-1212

Опубликовано: 13 авг. 2019

Источник: msrc

CVSS3: 9.8

EPSS Средний

Уязвимость DoS в Windows DHCP Server из-за некорректной обработки пакетов памяти службой DHCP

Описание

Злоумышленник, успешно использующий данную уязвимость, способен привести к остановке работы DHCP сервера.

Условия эксплуатации

Для эксплуатации уязвимости удаленный неаутентифицированный злоумышленник способен отправить специально созданный пакет на уязвимый DHCP сервер.

Решение

Обновление безопасности устраняет уязвимость путем корректировки обработки DHCP серверами сетевых пакетов.

Обновления

Продукт	Статья	Обновление
Windows Server 2008 for Itanium-Based Systems Service Pack 2	4512476 4512491	Monthly Rollup Security Only
Windows Server 2008 for 32-bit Systems Service Pack 2	4512476 4512491	Monthly Rollup Security Only
Windows Server 2008 for x64-based Systems Service Pack 2	4512476 4512491	Monthly Rollup Security Only
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)	4512476 4512491	Monthly Rollup Security Only
Windows 7 for 32-bit Systems Service Pack 1	4512506 4512486	Monthly Rollup Security Only
Windows 7 for x64-based Systems Service Pack 1	4512506 4512486	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	4512506 4512486	Monthly Rollup Security Only
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1	4512506 4512486	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1	4512506 4512486	Monthly Rollup Security Only
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)	4512476 4512491	Monthly Rollup Security Only

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 95%

0.1782

Средний

9.8 Critical

CVSS3

Связанные уязвимости

CVE-2019-1212

CVSS3: 9.8

nvd

почти 6 лет назад

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

GHSA-ggpr-x33h-6668

github

около 3 лет назад

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1206.

BDU:2019-03152

CVSS3: 7.5

fstec