CVE-2019-1223 — Microsoft Windows Server 2019 vulnerability

11 documents7 sources
Severity
7.5HIGHNVD
EPSS
18.5%
top 4.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Microsoft Windows 10 Version 1803Microsoft Windows 10 Version 1809Microsoft Windows 10 Version 1903 FOR 32-bit Systems+5 more
Timeline
PublishedAug 14
Latest updateMay 24

Description

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services. The update addresses the vulnerability …

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages8 packages

▶CVEListV5microsoft/windows_server_201910.0.0 — publication
▶CVEListV5microsoft/windows_10_version_180310.0.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qxww-2h29-62jj: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially↗2022-05-24
▶
CVEList
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability↗2019-08-14
▶

📋Vendor Advisories

1
Microsoft
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability↗2019-08-13
▶

🕵️Threat Intelligence

7
Qualys
August 2019 Patch Tuesday – 93 Vulns, 29 Critical, 7 Remote Desktop Vulns, Hyper-V, DHCP, Adobe vulns↗2019-08-13
▶
Talos
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage↗2019-08-13
▶
Tenable
Tenable Roundup for Microsoft’s August 2019 Patch Tuesday: DejaBlue↗2019-08-13
▶
Qualys
Windows Remote Desktop Vulnerabilities (Seven Monkeys) – How to Detect and Patch↗2019-08-13
▶
Talos
Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage↗2019-08-13
▶
CVE-2019-1223 — Microsoft vulnerability | cvebase