Windows IPSec Denial of Service Vulnerability
🔗 CVE IDs covered (1)
📋 Description
A denial of service vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of service condition could prevent authorized users from using system resources. The security update addresses the vulnerability by correcting how Windows handles objects in memory.
🎯 Affected products18
- Windows 10 Version 1511 for 32-bit Systems
- Windows 10 Version 1511 for x64-based Systems
- Windows 10 Version 1607 for 32-bit Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1703 for 32-bit Systems
- Windows 10 Version 1703 for x64-based Systems
- Windows 10 Version 1709 for 32-bit Systems
- Windows 10 for 32-bit Systems
- Windows 10 for x64-based Systems
- Windows 8.1 for 32-bit systems
- Windows 8.1 for x64-based systems
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server, version 1709 (Server Core Installation)
✅ Remediation
KB4056891 (Security Update) KB4056893 (Security Update) KB4056888 (Security Update) KB4056890 (Security Update) KB4056895 (Monthly Rollup) KB4056898 (Security Only) KB4056896 (Monthly Rollup) KB4056899 (Security Only) KB4056892 (Security Update)
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-0753
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056891
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056893
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056888
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056890
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056895
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056898
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056896
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056899
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4056892