CVE-2018-8342

Опубликовано: 15 авг. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8343.

Ссылки

http://www.securityfocus.com/bid/104975
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041466
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8342
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104975
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041466
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8342
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00254

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2018-8342

CVSS3: 7

msrc

почти 7 лет назад

Windows NDIS Elevation of Privilege Vulnerability

GHSA-x42x-mfx7-r4ph