PT-2019-2314 · Microsoft · Windows Dhcp Server Service+1

Publicado 2019-05-14 · Atualizado 2020-08-24 · CVE-2019-0725

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Server DHCP service (affected versions not specified)

Description A memory corruption issue exists in the Windows Server DHCP service when it processes specially crafted packets. This allows remote attackers to execute arbitrary code on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

Identificadores relacionados

BDU:2019-02085

CVE-2019-0725

Produtos afetados

Windows

Windows Dhcp Server Service

Referências · 8

• https://t.me/canyoupwnme/5569 · Publicação no Telegram
• https://t.me/defcon_news/14986 · Publicação no Telegram
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0725 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-0725 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0725 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0725 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0725 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02085 · Nota de Segurança