CVE-2018-8225
published 2018-06-14CVE-2018-8225: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI…
PriorityP357high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
22.26%
97.4th percentile
A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Affected
51 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10_servers | — | — |
| microsoft | windows_10_servers | — | — |
| microsoft | windows_7 | — | — |
| microsoft | windows_7 | — | — |
| microsoft | windows_8.1 | — | — |
| microsoft | windows_8.1 | — | — |
| microsoft | windows_rt_8.1 | — | — |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008 | — | — |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_msrc8.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8pc8-7phf-384v: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI
ghsa_unreviewed·2022-05-13
CVE-2018-8225 [HIGH] GHSA-8pc8-7phf-384v: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI
A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Microsoft
Windows DNSAPI Remote Code Execution Vulnerability
vendor_msrc·2018-06-12·CVSS 8.1
CVE-2018-8225 [HIGH] Windows DNSAPI Remote Code Execution Vulnerability
Windows DNSAPI Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account.
To exploit the vulnerability, the attacker would use a malicious DNS server to send corrupted DNS responses to the target.
The update addresses the vulnerability by modifying how Windows DNSAPI.dll handles DNS responses.
Microsoft Windows: Microsoft Windows
Impact: Remote Code Execution
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Reference: https://catalog.up
No detection rules found.
No public exploits indexed.
Talos
Microsoft Patch Tuesday - June 2018
blogs_talos·2018-06-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday - June 2018
## Executive SummaryMicrosoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 50 flaws, with 11 of them rated "critical," and 39 rated "important." These vulnerabilities impact Microsoft Edge, Internet Explorer, Chakra Scripting Engine, Windows DNSAPI, Microsoft Office, Windows Kernel and more.
In addition to the 50 vulnerabilities referenced above, Microsoft has also released a critical update advisory, ADV180014, the June 2018 Adobe Flash Security Update, which addresses the vulnerabilities described in the security bulletin.
### Critical vulnerabilitiesThis month, Microsoft is addressing 11 vulnerabilities that are rated "critical." Talos believes these three vu
Talos
Microsoft Patch Tuesday - June 2018
blogs_talos·2018-06-12·CVSS 8.1
[HIGH] Microsoft Patch Tuesday - June 2018
## Microsoft Patch Tuesday - June 2018
## Executive Summary Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 50 flaws, with 11 of them rated "critical," and 39 rated "important." These vulnerabilities impact Microsoft Edge, Internet Explorer, Chakra Scripting Engine, Windows DNSAPI, Microsoft Office, Windows Kernel and more.
In addition to the 50 vulnerabilities referenced above, Microsoft has also released a critical update advisory, ADV180014, the June 2018 Adobe Flash Security Update, which addresses the vulnerabilities described in the security bulletin.
## Critical vulnerabilities This month, Microsoft is addressing 11 vulnerabilities that are rated
http://www.securityfocus.com/bid/104395http://www.securitytracker.com/id/1041095https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8225http://www.securityfocus.com/bid/104395http://www.securitytracker.com/id/1041095https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8225
2018-06-14
Published