5

CVE-2014-0256

Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka "iSCSI Target Remote Denial of Service Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition datacenter
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition enterprise
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition enterprise_x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition hpc
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition standard
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition storage
Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition web
Microsoft ≫ Windows Server 2008 Version r2 Update sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 41.78% 0.985
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-028