PT-2018-1028 · Microsoft · Windows Server 2012 R2+4

Eric Schayes + 1 · Published 2018-02-13 · Updated 2025-08-05 · CVE-2018-0833

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows 8.1 and RT 8.1 Windows Server 2012 R2

Description The issue is related to how specially crafted requests are handled by the Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client, leading to a denial of service vulnerability. This vulnerability is caused by insufficient input validation in the mrxsmb.sys module, which implements the SMBv2/SMBv3 protocol in Windows operating systems. An attacker could exploit this vulnerability by sending a specially crafted packet, allowing them to cause a denial of service in the SMB client.

Recommendations For Windows 8.1 and RT 8.1, apply the necessary patches or updates to fix the issue. For Windows Server 2012 R2, apply the necessary patches or updates to fix the issue. As a temporary workaround, consider restricting access to the SMB client to minimize the risk of exploitation.

Exploit

Fix

DoS

RCE

NULL Pointer Dereference

Weakness Enumeration

CWE-20

CWE-476

Related Identifiers

BDU:2018-00316

CVE-2018-0833

ZDI-18-166

Affected Products

Server Message Block

Windows

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

References · 12

• 🔥 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833 · Exploit
• 🔥 https://krbtgt.pw/smbv3-null-pointer-dereference-vulnerability · Exploit
• 🔥 https://exploit-db.com/exploits/44189 · Exploit
• https://osv.dev/vulnerability/CVE-2018-0833 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0833 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0833 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00316 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0833 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-166 · Security Note
• http://securityfocus.com/bid/102924 · Note
• http://securitytracker.com/id/1040375 · Note