PT-2014-1028 · Microsoft · Windows+2
Published
2014-02-11
·
Updated
2018-10-12
·
CVE-2014-0254
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows versions prior to the fixed version
Windows Server 2012 versions prior to the fixed version
Windows RT versions prior to the fixed version
Description
The issue is related to the IPv6 implementation in Microsoft Windows, which does not properly validate packets. This allows remote attackers to cause a denial of service, resulting in a system hang, via crafted ICMPv6 Router Advertisement packets. An attacker who successfully exploits this issue could cause the affected system to stop responding.
Recommendations
For Microsoft Windows versions prior to the fixed version, update to the fixed version to resolve the issue.
For Windows Server 2012 versions prior to the fixed version, update to the fixed version to resolve the issue.
For Windows RT versions prior to the fixed version, update to the fixed version to resolve the issue.
As a temporary workaround, consider restricting access to ICMPv6 Router Advertisement packets to minimize the risk of exploitation.
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Windows
Windows Rt
Windows Server 2012