cnvd - cnvd-2018-08934

CNVD-2018-08934

Vulnerability from cnvd - Published: 2018-05-04

Title

Microsoft Windows 'HTTP.sys'拒绝服务漏洞

Description

Microsoft Windows 10、Windows Server 2016和Windows Server Version 1709都是美国微软（Microsoft）公司的产品。Microsoft Windows 10是一套跨平台操作系统，它适用于PC和笔记本电脑、平板电脑以及手机等设备。Windows Server 2016和Windows Server Version 1709都是服务器操作系统。HTTP.sys是其中的一个为应用程序提供信息通讯的系统组件。 Microsoft Windows 'HTTP.sys'存在拒绝服务漏洞，该漏洞源于程序未能正确的过滤特制的HTTP 2.0请求。远程攻击者可通过发送特制的HTTP数据包利用该漏洞造成拒绝服务（系统无法响应）。

Severity

中

Patch Name

Microsoft Windows 'HTTP.sys'拒绝服务漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-0956

Impacted products

Name
['Microsoft Windows 10', 'Microsoft Windows Server 2016', 'Microsoft Windows Server 1709']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "103650"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0956",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0956"
    }
  },
  "description": "Microsoft Windows 10\u3001Windows Server 2016\u548cWindows Server Version 1709\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Windows 10\u662f\u4e00\u5957\u8de8\u5e73\u53f0\u64cd\u4f5c\u7cfb\u7edf\uff0c\u5b83\u9002\u7528\u4e8ePC\u548c\u7b14\u8bb0\u672c\u7535\u8111\u3001\u5e73\u677f\u7535\u8111\u4ee5\u53ca\u624b\u673a\u7b49\u8bbe\u5907\u3002Windows Server 2016\u548cWindows Server Version 1709\u90fd\u662f\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002HTTP.sys\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4e3a\u5e94\u7528\u7a0b\u5e8f\u63d0\u4f9b\u4fe1\u606f\u901a\u8baf\u7684\u7cfb\u7edf\u7ec4\u4ef6\u3002\r\n\r\nMicrosoft Windows \u0027HTTP.sys\u0027\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fc7\u6ee4\u7279\u5236\u7684HTTP 2.0\u8bf7\u6c42\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7cfb\u7edf\u65e0\u6cd5\u54cd\u5e94\uff09\u3002",
  "discovererName": "Benjamin Kearns of Lateral Security",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-08934",
  "openTime": "2018-05-04",
  "patchDescription": "Microsoft Windows 10\u3001Windows Server 2016\u548cWindows Server Version 1709\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Windows 10\u662f\u4e00\u5957\u8de8\u5e73\u53f0\u64cd\u4f5c\u7cfb\u7edf\uff0c\u5b83\u9002\u7528\u4e8ePC\u548c\u7b14\u8bb0\u672c\u7535\u8111\u3001\u5e73\u677f\u7535\u8111\u4ee5\u53ca\u624b\u673a\u7b49\u8bbe\u5907\u3002Windows Server 2016\u548cWindows Server Version 1709\u90fd\u662f\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u3002HTTP.sys\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u4e3a\u5e94\u7528\u7a0b\u5e8f\u63d0\u4f9b\u4fe1\u606f\u901a\u8baf\u7684\u7cfb\u7edf\u7ec4\u4ef6\u3002\r\n\r\nMicrosoft Windows \u0027HTTP.sys\u0027\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u8fc7\u6ee4\u7279\u5236\u7684HTTP 2.0\u8bf7\u6c42\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684HTTP\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u7cfb\u7edf\u65e0\u6cd5\u54cd\u5e94\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows \u0027HTTP.sys\u0027\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows 10",
      "Microsoft Windows Server 2016",
      "Microsoft Windows Server 1709"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2018-0956",
  "serverity": "\u4e2d",
  "submitTime": "2018-04-12",
  "title": "Microsoft Windows \u0027HTTP.sys\u0027\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-0956 (GCVE-0-2018-0956)

Vulnerability from cvelistv5 – Published: 2018-04-12 01:00 – Updated: 2024-08-05 03:44

Summary

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Severity ?

No CVSS data available.

CWE

Denial of Service

Assigner

microsoft

References

URL

Tags

	https://portal.msrc.microsoft.com/en-US/security-…	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/103650	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id/1040661	vdb-entryx_refsource_SECTRACK

Impacted products

Vendor

Product

Version

Microsoft

Windows Server 2016

Affected: (Server Core installation)

	Microsoft	Windows 10	Affected: 32-bit Systems Affected: Version 1511 for 32-bit Systems Affected: Version 1511 for x64-based Systems Affected: Version 1607 for 32-bit Systems Affected: Version 1607 for x64-based Systems Affected: Version 1703 for 32-bit Systems Affected: Version 1703 for x64-based Systems Affected: Version 1709 for 32-bit Systems Affected: Version 1709 for x64-based Systems Affected: x64-based Systems
	Microsoft	Windows 10 Servers	Affected: version 1709 (Server Core Installation)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:44:11.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956"
          },
          {
            "name": "103650",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103650"
          },
          {
            "name": "1040661",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040661"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "(Server Core installation)"
            }
          ]
        },
        {
          "product": "Windows 10",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Version 1511 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Version 1511 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Version 1607 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Version 1607 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Version 1703 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Version 1703 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "Version 1709 for 32-bit Systems"
            },
            {
              "status": "affected",
              "version": "Version 1709 for x64-based Systems"
            },
            {
              "status": "affected",
              "version": "x64-based Systems"
            }
          ]
        },
        {
          "product": "Windows 10 Servers",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "version 1709  (Server Core Installation)"
            }
          ]
        }
      ],
      "datePublic": "2018-04-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka \"HTTP.sys Denial of Service Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-12T09:57:02",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956"
        },
        {
          "name": "103650",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103650"
        },
        {
          "name": "1040661",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040661"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2018-0956",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Windows Server 2016",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "(Server Core installation)"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Windows 10",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "32-bit Systems"
                          },
                          {
                            "version_value": "Version 1511 for 32-bit Systems"
                          },
                          {
                            "version_value": "Version 1511 for x64-based Systems"
                          },
                          {
                            "version_value": "Version 1607 for 32-bit Systems"
                          },
                          {
                            "version_value": "Version 1607 for x64-based Systems"
                          },
                          {
                            "version_value": "Version 1703 for 32-bit Systems"
                          },
                          {
                            "version_value": "Version 1703 for x64-based Systems"
                          },
                          {
                            "version_value": "Version 1709 for 32-bit Systems"
                          },
                          {
                            "version_value": "Version 1709 for x64-based Systems"
                          },
                          {
                            "version_value": "x64-based Systems"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Windows 10 Servers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "version 1709  (Server Core Installation)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Microsoft"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka \"HTTP.sys Denial of Service Vulnerability.\" This affects Windows Server 2016, Windows 10, Windows 10 Servers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956",
              "refsource": "CONFIRM",
              "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956"
            },
            {
              "name": "103650",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103650"
            },
            {
              "name": "1040661",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040661"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2018-0956",
    "datePublished": "2018-04-12T01:00:00",
    "dateReserved": "2017-12-01T00:00:00",
    "dateUpdated": "2024-08-05T03:44:11.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-08934

CVE-2018-0956 (GCVE-0-2018-0956)

Tags

Sightings

Nomenclature