CVE-2019-1212

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICAL
EPSS
18.0%
top 4.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
26
Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1709Microsoft Windows 10 Version 1709 FOR 32-bit Systems+23 more
Timeline
PublishedAug 14
Latest updateMay 24

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages26 packages

▶CVEListV5microsoft/windows_server_2008_service_pack_26.0.0 — publication
▶CVEListV5microsoft/windows_server_2008_r2_service_pack_16.1.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-ggpr-x33h-6668: A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Denial↗2022-05-24
▶
CVEList
Windows DHCP Server Denial of Service Vulnerability↗2019-08-14
▶

📋Vendor Advisories

1
Microsoft
Windows DHCP Server Denial of Service Vulnerability↗2019-08-13
▶