Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2019-0736

Windows DHCP Client Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client. The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1703

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1803

  • 10.0.0 to < publicationaffected

Microsoft Windows Server, version 1803 (Server Core Installation)

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1709 for 32-bit Systems

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1709

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1507

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1607

  • 10.0.0 to < publicationaffected

Microsoft Windows Server 2016

  • 10.0.0 to < publicationaffected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.0 to < publicationaffected

Microsoft Windows 7

  • 6.1.0 to < publicationaffected

Microsoft Windows 7 Service Pack 1

  • 6.1.0 to < publicationaffected

Microsoft Windows 8.1

  • 6.3.0 to < publicationaffected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2008 R2 Systems Service Pack 1

  • 6.1.0 to < publicationaffected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.0 to < publicationaffected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2012

  • 6.2.0 to < publicationaffected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.0 to < publicationaffected

Microsoft Windows Server 2012 R2

  • 6.3.0 to < publicationaffected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.0 to < publicationaffected

References