PT-2018-1880 · Microsoft · Windows 10 Servers+6

Mitch Adair · Published 2018-11-12 · Updated 2020-08-24 · CVE-2018-8626

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows Server 2019 Windows Server 2016 Windows 10 Windows 10 Servers

Description A remote code execution issue exists due to improper handling of requests by Windows Domain Name System (DNS) servers, which can be exploited by sending a specially crafted request. This allows remote attackers to execute arbitrary code on the system.

Recommendations For Windows Server 2012 R2, update to a version that includes the fix for the Windows DNS Server Heap Overflow issue. For Windows Server 2019, apply the necessary patch to resolve the DNS server heap overflow vulnerability. For Windows Server 2016, install the update that addresses the remote code execution vulnerability in the DNS server. For Windows 10, ensure that all security updates are applied to mitigate the risk of remote code execution. For Windows 10 Servers, apply the relevant security patch to fix the vulnerability in the DNS server.

Fix

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

BDU:2018-01482

CVE-2018-8626

Affected Products

Windows

Windows 10

Windows 10 Servers

Windows Dns Server

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

References · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8626 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8626 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8626 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01482 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-8626 · Security Note
• http://securityfocus.com/bid/106076 · Note