critical9.8
CVE-2019-0736
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client.
Impact
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client. The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1607, 1703, 1709, 1803 |
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2008 | All versions Version r2 |
| Microsoft | Windows Server 2012 | All versions Version r2 |
| Microsoft | Windows Server 2016 | All versions Version 1803 |