NetSight
high7.5

CVE-2020-16927

<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially craft…

Impact

<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>

Affected products

VendorProductAffected versions
MicrosoftWindows 10
All versions
Versions 1607, 1709, 1803, 1809, 1903
MicrosoftWindows 8.1
All versions
MicrosoftWindows Rt 8.1
All versions
MicrosoftWindows Server 2012
Version r2
MicrosoftWindows Server 2016
All versions
Versions 1903, 1909, 2004
MicrosoftWindows Server 2019
All versions

References