CVE-2019-0697

Windows DHCP Client Remote Code Execution Vulnerability

CVE-2019-0697 is fixed in 9 products on 1 platform, first by KB4489868, released March 12, 2019. It is not reported as exploited. Patch Radar priority: Urgent.

Urgent
CVSS
9.8
Critical
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.3292
98th percentile

<p>A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.</p> <p>To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client.</p> <p>The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1803 for 32-bit Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1803 for ARM64-based Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1803 for x64-based Systems 17134.648 KB4489868 Mar 12, 2019
Windows 10 Version 1809 for 32-bit Systems 17763.379 KB4489899 Mar 12, 2019
Windows 10 Version 1809 for ARM64-based Systems 17763.379 KB4489899 Mar 12, 2019
Windows 10 Version 1809 for x64-based Systems 17763.379 KB4489899 Mar 12, 2019
Windows Server 2019 17763.379 KB4489899 Mar 12, 2019
Windows Server 2019 (Server Core installation) 17763.379 KB4489899 Mar 12, 2019
Windows Server, version 1803 (Server Core Installation) 17134.648 KB4489868 Mar 12, 2019