CVE-2018-8626
First published: Wed Dec 12 2018(Updated: )
A remote code execution vulnerability exists in Windows Domain Name System (DNS) servers when they fail to properly handle requests, aka "Windows DNS Server Heap Overflow Vulnerability." This affects Windows Server 2012 R2, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | =1607 | |
| Windows 10 | =1709 | |
| Windows 10 | =1803 | |
| Windows 10 | =1809 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1709 | |
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-8626?
CVE-2018-8626 is classified as a critical remote code execution vulnerability affecting multiple Windows platforms.
How do I fix CVE-2018-8626?
To mitigate CVE-2018-8626, ensure that you apply the latest security updates provided by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2018-8626?
CVE-2018-8626 impacts Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, and multiple versions of Windows 10.
What are the potential impacts of CVE-2018-8626?
Exploitation of CVE-2018-8626 can allow an attacker to execute arbitrary code on a vulnerable DNS server.
Is there a workaround for CVE-2018-8626?
While updating your systems is the best approach, disabling unnecessary services can serve as a temporary workaround against CVE-2018-8626.
- agent/references
- agent/type
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1607
- version/windows 10/1709
- version/windows 10/1803
- version/windows 10/1809
- canonical/microsoft windows server
- version/microsoft windows server/r2
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1709
- version/microsoft windows server 2016/1803
- canonical/microsoft windows server 2019