← Back

CVE-2019-1206

nvd nist
Published: Aug 14, 2019Modified: Feb 20, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: secure@microsoft.com (Secondary)

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. However, the DHCP server must be set to failover mode for the attack to succeed. The security update addresses the vulnerability by correcting how DHCP failover servers handle network packets.

Affected (6)

3 products
Windows Server 2012
Windows Server 2016
Windows Server 2019
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
All versions
Version r2
Microsoft
All versions
Version 1803
Version 1903
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.