CVE-2014-0254

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 (IPv6) Denial of Service Vulnerability."

Score

CVSS 2.0 7.8 High

Status

Modified - secure@microsoft.com

Published

2014-02-12

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Windows 8 (Microsoft)
• Windows Rt (Microsoft)
• Windows Server 2012 (Microsoft)

References

• http://osvdb.org/103159
• http://secunia.com/advisories/56775
• http://www.securityfocus.com/bid/65409
• http://www.securitytracker.com/id/1029747
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-006
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90755