Lucene search

K
cve[email protected]CVE-2014-0254
HistoryFeb 12, 2014 - 4:50 a.m.

CVE-2014-0254

2014-02-1204:50:39
CWE-20
web.nvd.nist.gov
28
cve-2014-0254
ipv6
microsoft windows
windows 8
windows server 2012
windows rt
remote code execution
denial of service

6.5 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.077 Low

EPSS

Percentile

94.2%

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka “TCP/IP Version 6 (IPv6) Denial of Service Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_8Match--x64
OR
microsoftwindows_8Match--x86
OR
microsoftwindows_rtMatch-
OR
microsoftwindows_server_2012Match-

6.5 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.077 Low

EPSS

Percentile

94.2%