CVE-2018-0967: Medium severity windows 10 vulnerability

Published Apr 12, 2018

Updated

A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

Affected Software

14 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 7=sp1

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0967

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2018-0967?

CVE-2018-0967 is rated as a denial of service vulnerability, which can disrupt the availability of the affected systems.

How do I fix CVE-2018-0967?

To fix CVE-2018-0967, apply the appropriate security patch provided by Microsoft for your affected version of Windows or Windows Server.

What systems are affected by CVE-2018-0967?

CVE-2018-0967 affects various Windows operating systems including Windows 7, Windows 10, Windows Server 2008, and Windows Server 2016.

What type of vulnerability is CVE-2018-0967?

CVE-2018-0967 is categorized as a denial of service vulnerability specifically linked to the Windows SNMP Service.

Can CVE-2018-0967 be exploited remotely?

Yes, CVE-2018-0967 can be exploited remotely by sending malformed SNMP traps to the affected systems.