CVE-2019-0941Microsoft Windows 10 Version 1507 vulnerability

CWE-195 documents5 sources
Severity
4.4MEDIUMNVD
EPSS
2.8%
top 13.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 12
Latest updateMay 24

Description

A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering. To exploit this vulnerability, an attacker could send a specially crafted request to a page utilizing request filtering. The update addresses the vulnerability by changing the way certain requests are processed by the filte

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:LExploitability: 1.8 | Impact: 2.5

Affected Packages22 packages

CVEListV5microsoft/windows_server_2008_service_pack_26.0.6003.0publication+1
CVEListV5microsoft/windows_server_2008_r2_service_pack_16.1.7601.0publication
CVEListV5microsoft/windows_7_service_pack_16.1.0publication
CVEListV5microsoft/windows_server_20126.2.9200.0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-29gj-xrph-g435: A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests, aka 'Microsoft IIS Server2022-05-24
CVEList
Microsoft IIS Server Denial of Service Vulnerability2019-06-12

📋Vendor Advisories

1
Microsoft
Microsoft IIS Server Denial of Service Vulnerability2019-06-11
CVE-2019-0941 — Microsoft vulnerability | cvebase