Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Windows DNS Server Heap Overflow Vulnerability

Microsoft have released details of a buffer overflow vulnerability in the Windows DNS server. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition on an affected device.

Threat ID:
CC-2868
Category:
Threat Severity:
Medium
Threat Vector:
Published:
8 January 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Microsoft have released details of a buffer overflow vulnerability in the Windows DNS server. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition on an affected device.

Affected platforms

The following platforms are known to be affected:

Microsoft Windows

Microsoft Windows - All versions
  • Microsoft Windows Server - All versions

Threat details

The vulnerability lies in how the Windows DNS server handles requests. Malicious requests sent to the server by an attacker can result in a heap buffer overflow, which can then be used to execute code in the context of the Local System Account.

For further information:

Remediation steps

Type Step

Microsoft addressed this vulnerability in their CVE-2018-8626 Security Update Guide. Users and administrators are encouraged to review this guide and apply the relevant updates.

CVE Vulnerabilities

Status

CVE-2018-8626

Last edited: 14 February 2020 2:46 pm