Lucene search

K
mskbMicrosoftKB4093227
HistoryApr 10, 2018 - 7:00 a.m.

Description of the security update for the Windows Remote Desktop Protocol (RDP) denial of service vulnerability in Windows Server 2008: April 10, 2018

2018-04-1007:00:00
Microsoft
support.microsoft.com
23

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.027 Low

EPSS

Percentile

90.3%

Description of the security update for the Windows Remote Desktop Protocol (RDP) denial of service vulnerability in Windows Server 2008: April 10, 2018

Notice

An updated version of this security update was released June 12, 2018.

Summary

A denial of service vulnerability exists in the Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests.

To learn more about the vulnerability, see CVE-2018-0976.

More Information

ImportantIf you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: April 10, 2018

More Information

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

Windows Server 2008 file information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4093227-v2-ia64.msu 19F47175565EC5E216DCFBC98AF924F50BA95151 2713DC794FA3A3120CF8ED38A45EC3BB4D4489770D75CAB9A1BED9E22438575C
Windows6.0-KB4093227-v2-x86.msu 2658D1E45C14ED8B123DBFD24ED3FD5EA5E07814 8AFEB437EB5AB54155AEDC64978C03AD831DB238B8B467050F1E81D0C29FF9ED
Windows6.0-KB4093227-v2-x64.msu AED3CDA3A6DD9DBA80C816D78617A5BCCF99495D D8FBAB3E9FECDC1E8B9A6B0FF27792F304E0B8D2F7E5017FC2AE32FC625C5DE1

For all supported ia64-based versions

File name File version File size Date Time Platform SP requirement Service branch
Basecsp.dll 6.0.6002.24398 304,832 23-May-2018 04:52 IA-64 SP_ IA64_MICROSOFT-WINDOWS-SMARTCARDKSP
Scksp.dll 6.0.6002.24398 344,064 23-May-2018 04:33 IA-64 SP_ IA64_MICROSOFT-WINDOWS-SMARTCARDKSP
Basecsp.dll 6.0.6002.24398 129,728 23-May-2018 05:19 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP
Scksp.dll 6.0.6002.24398 141,824 23-May-2018 04:59 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP

For all supported x86-based versions

File name File version File size Date Time Platform SP requirement Service branch
Basecsp.dll 6.0.6002.24398 129,728 23-May-2018 05:19 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP
Scksp.dll 6.0.6002.24398 141,824 23-May-2018 04:59 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP

For all supported x64-based versions

File name File version File size Date Time Platform SP requirement Service branch
Basecsp.dll 6.0.6002.24398 152,768 23-May-2018 05:12 x64 SP_ AMD64_MICROSOFT-WINDOWS-SMARTCARDKSP
Scksp.dll 6.0.6002.24398 188,928 23-May-2018 04:44 x64 SP_ AMD64_MICROSOFT-WINDOWS-SMARTCARDKSP
Basecsp.dll 6.0.6002.24398 129,728 23-May-2018 05:19 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP
Scksp.dll 6.0.6002.24398 141,824 23-May-2018 04:59 x86 SP_ X86_MICROSOFT-WINDOWS-SMARTCARDKSP

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

6.9 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

0.027 Low

EPSS

Percentile

90.3%