CVE-2018-0833 The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests....
MediumCVSS 5.3
EPSS 40.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 8.1 | All versions | No fix listed |
| Microsoft windows rt 8.1 | All versions | No fix listed |
| Microsoft Windows Server 2012 | = r2 | No fix listed |
| Microsoft server message block | = Windows 8.1 and RT 8.1 and Windows Server 2012 R2 | No fix listed |
References
- 102924 third-party-advisory vdb-entry
- 1040375 third-party-advisory vdb-entry
- github.com exploit third-party-advisory
- portal.msrc.microsoft.com patch vendor-advisory
- 44189 exploit third-party-advisory vdb-entry