Lucene search
K

CVE-2018-0970

🗓️ 12 Apr 2018 01:00:00Reported by microsoftType 
cve
 cve
🔗 web.nvd.nist.gov👁 105 Views🌐 WEB

An information disclosure vulnerability exists in the Windows kernel that could lead to ASLR bypass, affecting multiple Windows versions

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Microsoft Windows - nt!NtQueryVolumeInformationFile Kernel Stack Memory Disclosure Exploit
17 Apr 201800:00
zdt
Circl
CVE-2018-0970
16 Apr 201800:00
circl
CNVD
Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-08762)
11 Apr 201800:00
cnvd
Cvelist
CVE-2018-0970
12 Apr 201801:00
cvelist
EUVD
EUVD-2018-1748
12 Apr 201801:00
euvd
EUVD
EUVD-2018-1749
12 Apr 201801:00
euvd
EUVD
EUVD-2018-1750
12 Apr 201801:00
euvd
EUVD
EUVD-2018-1751
12 Apr 201801:00
euvd
EUVD
EUVD-2018-1752
12 Apr 201801:00
euvd
EUVD
EUVD-2018-1753
12 Apr 201801:00
euvd
Rows per page
[
  {
    "product": "Windows 7",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1"
      }
    ]
  },
  {
    "product": "Windows Server 2012 R2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "(Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows RT 8.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Windows RT 8.1"
      }
    ]
  },
  {
    "product": "Windows Server 2008",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "32-bit Systems Service Pack 2 (Server Core installation)"
      },
      {
        "status": "affected",
        "version": "Itanium-Based Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 2"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 2 (Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows Server 2012",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "(Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows 8.1",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit systems"
      },
      {
        "status": "affected",
        "version": "x64-based systems"
      }
    ]
  },
  {
    "product": "Windows Server 2016",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "(Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows Server 2008 R2",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Itanium-Based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1"
      },
      {
        "status": "affected",
        "version": "x64-based Systems Service Pack 1 (Server Core installation)"
      }
    ]
  },
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1511 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1511 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "x64-based Systems"
      }
    ]
  },
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1709  (Server Core Installation)"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
Namepath\SystemRootInformation disclosure via NtQueryVolumeInformationFile leaking uninitialized kernel stack for SystemRoot object.
Namepath\Device\LanmanRedirectorInformation disclosure via NtQueryVolumeInformationFile leaking uninitialized kernel stack for LanmanRedirector object.
Namepath\Device\MailslotRedirectorInformation disclosure via NtQueryVolumeInformationFile leaking uninitialized kernel stack for MailslotRedirector object.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 03:39Current
5Medium risk
Vulners AI Score5
CVSS 22.1
CVSS 35.5
EPSS0.12804
105