Moderate CVSS 4.8 2018-02 archive

Executive Summary

A denial of service vulnerability exists in implementations of the Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client. The vulnerability is due to improper handling of certain requests sent by a malicious SMB server to the client. An attacker who successfully exploited this vulnerability could cause the affected system to stop responding until it is manually restarted. To exploit the vulnerability, an attacker could use various methods such as redirectors, injected HTML header links, etc., which could cause the SMB client to connect to a malicious SMB server. The security update addresses the vulnerability by correcting how the Microsoft SMBv2/SMBv3 Client handles specially crafted requests.

Overview

4.8
CVSS MEDIUM
Moderate
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Denial of Service
Released Feb 13 2018
Last Updated Feb 13 2018
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
Low
USER INTERACTION
Required
SCOPE
Unchanged
CONFIDENTIALITY
None
INTEGRITY
None
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 4.3

EPSS Score

No EPSS score available for this CVE.

View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Windows 8.1 for 32-bit systems 4074594 (Monthly Rollup) 4074597 (Security Only) Moderate Denial of Service 4056895 Base: 4.8 Temporal: 4.3 Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C Yes None Windows 8.1 for x64-based systems 4074594 (Monthly Rollup) 4074597 (Security Only) Moderate Denial of Service 4056895 Base: 4.8 Temporal: 4.3 Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C Yes None Windows RT 8.1 4074594 (Monthly Rollup) Moderate Denial of Service Yes

Patches

1 patch
Article Type Restart
4074594 Monthly Rollup Yes

Known Exploits

Acknowledgments

Nabeel Ahmed and Eric Schayes from Dimension Data working with Trend Micro's Zero Day Initiative