CVE-2014-0256

EPSS 41.53%
Veröffentlicht 14.05.2014 11:13:04
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka "iSCSI Target Remote Denial of Service Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows Server 2008 Version- Updatesp2

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editiondatacenter

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionenterprise

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionenterprise_x64

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionhpc

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionitanium

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionstandard

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionstorage

Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionweb

Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1

Microsoft ≫ Windows Server 2012 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	41.53%	0.973

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-028

https://nvd.nist.gov/vuln/detail/CVE-2014-0256

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0256

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0256

EUVD