Skip to content
OpenAdvisories
High · 7.5 Public exploit CVE-2020-16899 EUVD-2020-8857GHSA-q39p-3jrw-5c8j

Windows TCP/IP Denial of Service Vulnerability

Published Oct 16, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Windows 10 Version 1709 Product: Windows 10 Version 1709 for 32-bit Systems Product: Windows 10 Version 1803 Product: Windows 10 Version 1809 Product: Windows 10 Version 1903 for 32-bit Systems Product: Windows 10 Version 1903 for ARM64-based Systems Product: Windows 10 Version 1903 for x64-based Systems Product: Windows 10 Version 1909 Product: Windows 10 Version 2004 Product: Windows Server 2019 Product: Windows Server 2019 (Server Core installation) Product: Windows Server version 2004 Product: Windows Server, version 1903 (Server Core installation) Product: Windows Server, version 1909 (Server Core installation) Platform: Windows

Description

<p>A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could cause a target system to stop responding.</p>
<p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer. The vulnerability would not allow an attacker to execute code or to elevate user rights directly.</p>
<p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 1803 10.0.0 – < publication publication
Microsoft Windows 10 Version 1809 10.0.0 – < publication publication
Microsoft Windows Server 2019 10.0.0 – < publication publication
Microsoft Windows Server 2019 (Server Core installation) 10.0.0 – < publication publication
Microsoft Windows 10 Version 1909 10.0.0 – < publication publication
Microsoft Windows Server, version 1909 (Server Core installation) 10.0.0 – < publication publication
Microsoft Windows 10 Version 1709 for 32-bit Systems 10.0.0 – < publication publication
Microsoft Windows 10 Version 1709 10.0.0 – < publication publication
Microsoft Windows 10 Version 1903 for 32-bit Systems 10.0.0 – < publication publication
Microsoft Windows 10 Version 1903 for x64-based Systems 10.0.0 – < publication publication
Microsoft Windows 10 Version 1903 for ARM64-based Systems 10.0.0 – < publication publication
Microsoft Windows Server, version 1903 (Server Core installation) 10.0.0 – < publication publication
Microsoft Windows 10 Version 2004 10.0.0 – < publication publication
Microsoft Windows Server version 2004 10.0.0 – < publication publication

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References