First published: Mon Apr 08 2019(Updated: )
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 10 | =1803 | |
Windows 10 | =1809 | |
Microsoft Windows Server 2016 | =1803 | |
Microsoft Windows Server 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0697 has a severity rating of Critical due to its potential for remote code execution.
To fix CVE-2019-0697, apply the latest security updates provided by Microsoft for affected systems.
CVE-2019-0697 affects Microsoft Windows 10 versions 1803 and 1809, as well as Windows Server 2016 and 2019.
An attacker exploiting CVE-2019-0697 could execute arbitrary code on the victim's system through specially crafted DHCP responses.
Microsoft recommends applying the security update as the primary action, but disabling DHCP if not needed could serve as an interim workaround.