PT-2018-1346 · Microsoft · Windows Server 2016+10

Publicado 2018-06-12 · Atualizado 2019-10-03 · CVE-2018-8225

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description A remote code execution issue exists in Windows Domain Name System (DNS) due to improper handling of DNS responses. This can be exploited by sending specially crafted DNS responses from a malicious DNS server, allowing remote attackers to execute arbitrary code in the context of the Local System Account.

Recommendations For Windows 7, apply the necessary patch to fix the DNSAPI.dll issue. For Windows Server 2012 R2, update the DNSAPI.dll component to prevent remote code execution. For Windows RT 8.1, restrict access to the DNS server to minimize the risk of exploitation. For Windows Server 2008, disable the DNSAPI.dll component until a patch is available. For Windows Server 2012, consider implementing additional security measures to prevent arbitrary code execution. For Windows 8.1, avoid using the DNS server until the issue is resolved. For Windows Server 2016, update the system to prevent remote attackers from executing arbitrary code. For Windows Server 2008 R2, restrict the use of the DNSAPI.dll component to minimize the risk of exploitation. For Windows 10, apply the necessary patch to fix the DNSAPI.dll issue. For Windows 10 Servers, update the DNSAPI.dll component to prevent remote code execution.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2018-00845

CVE-2018-8225

Produtos afetados

Windows

Windows 10

Windows 10 Servers

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Referências · 11

• http://securityfocus.com/bid/104395 · Nota
• https://securityfocus.com/bid/104395/info · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8225 · Aviso do Fabricante
• https://xakep.ru/2018/06/14/june-patch-tuesday-2 · Nota
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8225 · Aviso do Fabricante
• http://securitytracker.com/id/1041095 · Nota
• https://osv.dev/vulnerability/CVE-2018-8225 · Aviso do Fabricante
• https://securitytracker.com/id/1041095 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8225 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-8225 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-00845 · Nota de Segurança