CVE-2018-8175

WEBDAV Denial of Service Vulnerability

CVE-2018-8175 is fixed in 6 products on 1 platform, first by KB4284819, released June 12, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.9
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0796
94th percentile

<p>A denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory. An attacker who successfully exploited the vulnerability could cause a denial of service.</p> <p>To exploit the vulnerability, an attacker could host a specially crafted website and then convince a user to browse to it, which would cause the victim's system to stop responding. However, an attacker could not force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's WEBDAV directory.</p> <p>The security update addresses the vulnerability by correcting how Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1709 for 32-bit Systems 16299.492 KB4284819 Jun 12, 2018
Windows 10 Version 1709 for x64-based Systems 16299.492 KB4284819 Jun 12, 2018
Windows 10 Version 1803 for 32-bit Systems 17134.112 KB4284835 Jun 12, 2018
Windows 10 Version 1803 for x64-based Systems 17134.112 KB4284835 Jun 12, 2018
Windows Server, version 1709 (Server Core Installation) 16299.492 KB4284819 Jun 12, 2018
Windows Server, version 1803 (Server Core Installation) 17134.112 KB4284835 Jun 12, 2018