CVE-2018-0956: High severity windows 10 vulnerability

Published Apr 12, 2018

Updated

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Affected Software

7 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0956

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0956?

CVE-2018-0956 is classified as a denial of service vulnerability that can cause significant disruption in services.

How do I fix CVE-2018-0956?

To fix CVE-2018-0956, apply the latest security updates provided by Microsoft for the affected Windows versions.

Which systems are affected by CVE-2018-0956?

CVE-2018-0956 affects Microsoft Windows 10 and Windows Server 2016 across multiple versions.

How does CVE-2018-0956 work?

CVE-2018-0956 exploits improper parsing of specially crafted HTTP 2.0 requests by the HTTP.sys protocol stack.

What are the potential impacts of CVE-2018-0956?

Exploitation of CVE-2018-0956 can lead to service downtime and disruption of web applications running on affected systems.