CVE-2018-8444HighCVSS 7.0

Windows SMB Information Disclosure Vulnerability

Published
September 11, 2018
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server. To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv2 server. The security update addresses the vulnerability by correcting how SMBv2 handles these specially crafted requests.

🎯 Affected products9

  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)

✅ Remediation

KB4457132 (Security Update) KB4457129 (Monthly Rollup) KB4457143 (Security Only) KB4457135 (Monthly Rollup) KB4457140 (Security Only)

🔗 References (6)