Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-1213 EUVD-2019-9781GHSA-7j2x-4f39-6gwm

Windows DHCP Server Remote Code Execution Vulnerability

Published Aug 14, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server.
To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.
The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

Affected products

VendorProductAffectedFixed
Microsoft Windows Server 2008 Service Pack 2 6.0.0 – < publication publication
Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) 6.0.0 – < publication publication
Microsoft Windows Server 2008 Service Pack 2 6.0.0 – < publication publication

References