Buffer overflow in Windows Server - CVE-2019-1213

 

Buffer overflow in Windows Server - CVE-2019-1213

Published: August 13, 2019


Vulnerability identifier: #VU20204
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2019-1213
CWE-ID: CWE-119
Exploitation vector: Adjecent network
Exploit availability: No public exploit available
Vendor: Microsoft
Affected software:
Windows Server

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error the Windows Server DHCP service when processing DHCP packets. A remote attacker can send specially crafted DHCP packets to the affected service, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


How to mitigate CVE-2019-1213

Install updates from vendor's website.

Sources