Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2019-1213

Windows DHCP Server Remote Code Execution Vulnerability

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.0 to < publicationaffected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.0 to < publicationaffected

References