CVE-2020-16927Microsoft Windows Server 2012 R2 vulnerability

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
18.6%
top 4.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 16
Latest updateMay 24

Description

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services. The update addresses the vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages18 packages

CVEListV5microsoft/windows_server_201610.0.0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-c483-26fv-jphv: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially2022-05-24
CVEList
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability2020-10-16

📋Vendor Advisories

1
Microsoft
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability2020-10-13
CVE-2020-16927 — Microsoft vulnerability | cvebase