Vulnerability Name:
CVE-2019-1343 (CCN-167459)
Assigned:
2018-11-26
Published:
2019-10-08
Updated:
2020-08-24
Summary:
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from
CVE-2019-1346
,
CVE-2019-1347
.
CVSS v3 Severity:
6.5 Medium
(CVSS v3.1 Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
)
5.7 Medium
(Temporal CVSS v3.1 Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
)
Exploitability Metrics:
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
None
User Interaction (UI):
Required
Scope:
Scope (S):
Unchanged
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
None
Availibility (A):
High
5.5 Medium
(CCN CVSS v3.1 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
)
4.8 Medium
(CCN Temporal CVSS v3.1 Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
)
Exploitability Metrics:
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope:
Scope (S):
Unchanged
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
None
Availibility (A):
High
CVSS v2 Severity:
7.1 High
(CVSS v2 Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:C
)
Exploitability Metrics:
Access Vector (AV):
Network
Access Complexity (AC):
Medium
Authentication (Au):
None
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
None
Availibility (A):
Complete
4.6 Medium
(CCN CVSS v2 Vector:
AV:L/AC:L/Au:S/C:N/I:N/A:C
)
Exploitability Metrics:
Access Vector (AV):
Local
Access Complexity (AC):
Low
Athentication (Au):
Single_Instance
Impact Metrics:
Confidentiality (C):
None
Integrity (I):
None
Availibility (A):
Complete
Vulnerability Type:
CWE-noinfo
Vulnerability Consequences:
Denial of Service
References:
Source: MITRE
Type: CNA
CVE-2019-1343
Source: MISC
Type: Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/154798/Microsoft-Windows-Kernel-nt-MiOffsetToProtos-NULL-Pointer-Dereference.html
Source: XF
Type: UNKNOWN
ms-windows-cve20191343-dos(167459)
Source: CCN
Type: Packet Storm Security [10-10-2019]
Microsoft Windows Kernel nt!MiOffsetToProtos NULL Pointer Dereference
Source: CCN
Type: Microsoft Security TechCenter - October 2019
Windows Denial of Service Vulnerability
Source: MISC
Type: Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1343
Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [10-10-2019]
Vulnerable Configuration:
Configuration 1
:
cpe:/o:microsoft:windows_10:-:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1607:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1703:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1709:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1803:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1809:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:1903:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*
OR
cpe:/o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*
OR
cpe:/o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
Configuration CCN 1
:
cpe:/o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_8.1:-:-:-:*:-:-:x32:*
OR
cpe:/o:microsoft:windows_8.1:*:*:*:*:*:*:x64:*
OR
cpe:/o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:-:*:*:*:*:*:x32:*
OR
cpe:/o:microsoft:windows_10:*:*:*:*:*:*:x64:*
OR
cpe:/o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server:1803:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
OR
cpe:/o:microsoft:windows_10:-:*:*:*:*:*:arm64:*
OR
cpe:/o:microsoft:windows_server:1903:*:*:*:*:*:*:*
Denotes that component is vulnerable
BACK
microsoft
windows 10 -
microsoft
windows 10 1607
microsoft
windows 10 1703
microsoft
windows 10 1709
microsoft
windows 10 1803
microsoft
windows 10 1809
microsoft
windows 10 1903
microsoft
windows 8.1 -
microsoft
windows rt 8.1 -
microsoft
windows server 2012 -
microsoft
windows server 2012 r2
microsoft
windows server 2016 -
microsoft
windows server 2016 1803
microsoft
windows server 2016 1903
microsoft
windows server 2019 -
microsoft
windows server 2012
microsoft
windows 8.1 - -
microsoft
windows 8.1 *
microsoft
windows server 2012 r2
microsoft
windows rt 8.1 *
microsoft
windows 10 -
microsoft
windows 10 *
microsoft
windows server 2016
microsoft
windows server 1803
microsoft
windows server 2019
microsoft
windows 10 -
microsoft
windows server 1903