PT-2018-18497 · Microsoft · Windows Server 2016+2

Publicado 2018-06-12 · Atualizado 2019-10-03 · CVE-2018-8226

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers

Description A denial of service issue exists due to improper parsing of specially crafted HTTP 2.0 requests in the HTTP.sys protocol stack. This allows attackers to affect the system.

Recommendations For Windows Server 2016, update the HTTP.sys protocol stack to a version that properly handles HTTP 2.0 requests. For Windows 10, update the HTTP.sys protocol stack to a version that properly handles HTTP 2.0 requests. For Windows 10 Servers, update the HTTP.sys protocol stack to a version that properly handles HTTP 2.0 requests.

Correção

Identificadores relacionados

CVE-2018-8226

Produtos afetados

Windows

Windows 10

Windows Server 2016

Referências · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8226 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-8226 · Aviso do Fabricante
• http://securityfocus.com/bid/104361 · Nota
• http://securitytracker.com/id/1041094 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8226 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-8226 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8226 · Aviso do Fabricante