CRITICAL
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'
Published May 16, 2019
9.8
CRITICALCVSS 3.0
EPSS 28.23%
Description
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
Affected products
-
- Version 2008 R2 for Itanium-Based Systems Service Pack 1StatusaffectedConstraints-
- Version 2008 R2 for x64-based Systems Service Pack 1StatusaffectedConstraints-
- Version 2008 R2 for x64-based Systems Service Pack 1 (Core installation)StatusaffectedConstraints-
- Version 2012StatusaffectedConstraints-
- Version 2012 (Core installation)StatusaffectedConstraints-
- Version 2012 R2StatusaffectedConstraints-
- Version 2012 R2 (Core installation)StatusaffectedConstraints-
- Version 2016StatusaffectedConstraints-
- Version 2016 (Core installation)StatusaffectedConstraints-
- Version 2019StatusaffectedConstraints-
- Version 2019 (Core installation)StatusaffectedConstraints-
- Version version 1803 (Core Installation)StatusaffectedConstraints-
- Version
-
- Version unspecifiedStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Windows Server | n/a |
| |||||||||||||||||||||||||||||||||||||||
| Microsoft | Windows Server, version 1903 (Server Core installation) | n/a |
|
OR
- r2
- r2
- n/a
- r2
- n/a
- 1803
- 1903
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1485 Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0725 x_refsource_MISCPatchVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1485 | Advisory | |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0725 | x_refsource_MISCPatchVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner microsoft
Published May 16, 2019
Updated Aug 4, 2024
Reserved Nov 26, 2018
Link CVE-2019-0725
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-1485 Assigner microsoft
Published May 16, 2019
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2019-1485