7.5
High
CVE-2019-1206 A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted…
Description
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. However, the DHCP server must be set to failover mode for the attack to succeed. The security update addresses the vulnerability by correcting how DHCP failover servers handle network packets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server, version 1803 (Server Core Installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2019 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server, version 1903 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2016 (Server Core installation) 10.0 | 10.0.0 → latest | No fix stated |
| Windows Server 2012 6.2 | 6.2.0 → latest | No fix stated |
| Windows Server 2012 (Server Core installation) 6.2 | 6.2.0 → latest | No fix stated |
| Windows Server 2012 R2 6.3 | 6.3.0 → latest | No fix stated |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server 2012 R2 (Server Core installation) 6.3 | 6.3.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows Server, version 1803 (Server Core Installation)
The 171 CVEs of Windows Server, version 1803 (Server Core Installation) →
CVE-2020-1191
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in…
7.8
High
CVE-2020-1190
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in…
7.8
High
CVE-2020-1188
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in…
7.8
High
CVE-2020-1189
An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in…
7.8
High