CVE-2019-0785 — Out-of-bounds Write in Microsoft Windows Server

CWE-787 — Out-of-bounds WriteCWE-20 — Improper Input Validation10 documents8 sources
Severity
9.8CRITICALNVD
EPSS
51.5%
top 2.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Microsoft Windows ServerMicrosoft Windows Server 2012Microsoft Windows Server 2016+6 more
Timeline
PublishedJul 15
Latest updateMay 24

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages8 packages

▶CVEListV5microsoft/windows_server9 versions+8

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-9fc3-q27f-j286: A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server↗2022-05-24
▶

📋Vendor Advisories

2
Microsoft
Windows DHCP Server Remote Code Execution Vulnerability↗2019-07-09
▶
Red Hat
struts2: forced double OGNL evaluation on raw input in tag attributes↗2016-04-13
▶

🕵️Threat Intelligence

5
Krebs
Patch Tuesday Lowdown, July 2019 Edition↗2019-07-13
▶
Qualys
July 2019 Patch Tuesday – 77 Vulns, 15 Critical, DHCP RCE, Exploited PrivEsc, SQL, Adobe Vulns | Qualys↗2019-07-09
▶
Qualys
July 2019 Patch Tuesday – 77 Vulns, 15 Critical, DHCP RCE, Exploited PrivEsc, SQL, Adobe Vulns↗2019-07-09
▶
Tenable
Microsoft’s July 2019 Patch Tuesday: What You Need to Know↗2019-07-09
▶
Krebs
Patch Tuesday Lowdown, July 2019 Edition↗2019-07-09
▶

💬Community

1
Bugzilla
CVE-2016-0785 struts2: forced double OGNL evaluation on raw input in tag attributes↗2016-04-13
▶
CVE-2019-0785 — Out-of-bounds Write in Microsoft | cvebase