CVE-2018-8444HighCVSS 7.0
Windows SMB Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server. To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv2 server. The security update addresses the vulnerability by correcting how SMBv2 handles these specially crafted requests.
🎯 Affected products9
- Windows 10 for 32-bit Systems
- Windows 10 for x64-based Systems
- Windows 8.1 for 32-bit systems
- Windows 8.1 for x64-based systems
- Windows RT 8.1
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
✅ Remediation
KB4457132 (Security Update) KB4457129 (Monthly Rollup) KB4457143 (Security Only) KB4457135 (Monthly Rollup) KB4457140 (Security Only)
🔗 References (6)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8444
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140