PT-2014-1012 · Microsoft · Windows Server 2008+1

Pawel Wylecial · Publicado 2014-05-14 · Atualizado 2019-05-08 · CVE-2014-0255

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows Server 2012 Gold and R2

Description A denial of service issue exists in the Windows operating system related to the processing of iSCSI packets. Successful exploitation of this issue could allow an attacker to cause a service outage. This can be achieved by sending many crafted packets to the iSCSI service.

Recommendations For Microsoft Windows Server 2008 SP2 and R2 SP1, consider restricting access to the iSCSI service to minimize the risk of exploitation. For Microsoft Windows Server 2012 Gold and R2, consider implementing network traffic filtering to limit the impact of crafted packets on the iSCSI service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2014-00058

CVE-2014-0255

Produtos afetados

Windows Server 2008

Windows Server 2012

Referências · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0255 · Nota de Segurança
• http://technet.microsoft.com/ru-ru/security/bulletin/ms14-028 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-028 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2014-00058 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2014-0255 · Nota de Segurança