Denial of service vulnerability in SMB2 TREE_CONNECT Response structure in Microsoft WindowsID: oval:org.secpod.oval:def:39118 | Date: (C)2017-03-01 (M)2024-03-06 |
Class: VULNERABILITY | Family: windows |
The host is installed with Microsoft Windows 10, Windows 8.1, Windows Server 2016 and Windows Server 2012 R2 and is prone to a denial of service vulnerability. A flaw is present in the SMB2 TREE_CONNECT Response structure, which fails to properly handle a specially-crafted server response that contains too many bytes following the structure defined in the SMB2 TREE_CONNECT Response structure. Successful exploitation allows attackers to cause a denial of service.
Platform: |
Microsoft Windows 10 |
Microsoft Windows 8.1 |
Microsoft Windows Server 2012 R2 |
Microsoft Windows Server 2016 |