CVE-2020-1031Sensitive Information Exposure in Microsoft Windows 10 Version 1507

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
16.4%
top 5.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory. To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The security update addresses the vulnerability by correcting how DHCP servers initializes memory.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages23 packages

CVEListV5microsoft/windows_server_2008_service_pack_26.0.0publication
CVEListV5microsoft/windows_server_2008_r2_service_pack_16.1.0publication+1
CVEListV5microsoft/windows_server_20126.2.0publication
CVEListV5microsoft/windows_server_201610.0.0publication
CVEListV5microsoft/windows_server_201910.0.0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-w59p-w4fh-943v: An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory2022-05-24
CVEList
Windows DHCP Server Information Disclosure Vulnerability2020-09-11

📋Vendor Advisories

1
Microsoft
Windows DHCP Server Information Disclosure Vulnerability2020-09-08
CVE-2020-1031 — Sensitive Information Exposure | cvebase