PT-2019-3053 · Microsoft · Windows Dhcp Server Service+1

CVE-2019-1206 · Publicado 2019-08-13 · Atualizado 2024-05-29

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Server DHCP service (affected versions not specified)

Description A memory corruption issue exists in the Windows Server DHCP service, allowing an attacker to send specially crafted packets to a DHCP failover server, potentially causing the DHCP service to become nonresponsive. The attack requires the DHCP server to be set to failover mode. The vulnerability is related to how DHCP failover servers handle network packets.

Recommendations To resolve the issue, apply the security update that corrects how DHCP failover servers handle network packets. As a temporary workaround, consider restricting access to the DHCP server when it is set to failover mode until the security update is applied.

Correção

DoS

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

BDU:2019-03035

CVE-2019-1206

Produtos afetados

Windows

Windows Dhcp Server Service

Referências · 6

• https://bdu.fstec.ru/vul/2019-03035 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1206 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1206 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-1206 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1206 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-1206 · Nota de Segurança