CVE-2018-8151: Buffer Overflow

Published May 9, 2018

Updated

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154.

Affected Software

6 affected components

Microsoft Exchange Server=2010-sp3

Microsoft Exchange Server=2013-cumulative_update_19

Microsoft Exchange Server=2013-cumulative_update_20

Microsoft Exchange Server=2013-sp1

Microsoft Exchange Server=2016-cumulative_update_8

Microsoft Exchange Server=2016-cumulative_update_9

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8151

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8151?

CVE-2018-8151 has a critical severity rating due to its potential for information disclosure.

How do I fix CVE-2018-8151?

To fix CVE-2018-8151, apply the latest security updates provided by Microsoft for your affected version of Exchange Server.

Which versions of Microsoft Exchange Server are affected by CVE-2018-8151?

CVE-2018-8151 affects Microsoft Exchange Server 2010 SP3, 2013 Cumulative Update 19 and 20, 2013 SP1, and 2016 Cumulative Updates 8 and 9.

What type of vulnerability is CVE-2018-8151?

CVE-2018-8151 is classified as an information disclosure vulnerability related to memory handling.

Why is CVE-2018-8151 important to address?

Addressing CVE-2018-8151 is crucial because it can lead to unauthorized access to sensitive information from Microsoft Exchange Server.