CVE-2014-1811

Description

The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service (non-paged pool memory consumption and system hang) via malformed data in the Options field of a TCP header, aka TCP Denial of Service Vulnerability.

Risk Information

Base Score
7.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
33.415

Associated Vulnerability

VulnerabilityOS Platform
Security Update for Windows Server 2003 (KB2926765)Windows
Security Update for Windows Vista (KB2926765)Windows
Security Update for Windows Server 2008 (KB2926765)Windows
Security Update for Windows 7 (KB2926765)Windows
Security Update for Windows 8 (KB2926765)Windows
Security Update for Windows 8.1 (KB2926765)Windows
Security Update for Windows Server 2003 x64 Edition (KB2926765)Windows
Security Update for Windows Vista for x64-based Systems (KB2926765)Windows
Security Update for Windows Server 2008 x64 Edition (KB2926765)Windows
Security Update for Windows 7 for x64-based Systems (KB2926765)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2926765)Windows
Security Update for Windows 8 for x64-based Systems (KB2926765)Windows
Security Update for Windows Server 2012 (KB2926765)Windows
Security Update for Windows 8.1 for x64-based Systems (KB2926765)Windows
Security Update for Windows Server 2012 R2 (KB2926765)Windows
Security Update for Windows Vista (KB2957189)Windows
Security Update for Windows Server 2008 (KB2957189)Windows
Security Update for Windows 7 (KB2957189)Windows
Security Update for Windows 8 (KB2957189)Windows
Security Update for Windows 8.1 (KB2957189)Windows
Security Update for Windows Vista for x64-based Systems (KB2957189)Windows
Security Update for Windows Server 2008 x64 Edition (KB2957189)Windows
Security Update for Windows 7 for x64-based Systems (KB2957189)Windows
Security Update for Windows Server 2008 R2 x64 Edition (KB2957189)Windows
Security Update for Windows 8 for x64-based Systems (KB2957189)Windows
Security Update for Windows Server 2012 (KB2957189)Windows
Security Update for Windows 8.1 for x64-based Systems (KB2957189)Windows
Security Update for Windows Server 2012 R2 (KB2957189)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-15480Security Update for Windows Server 2003 (KB2926765)
PATCH-15481Security Update for Windows Vista (KB2926765)
PATCH-15482Security Update for Windows Server 2008 (KB2926765)
PATCH-15483Security Update for Windows 7 (KB2926765)
PATCH-15484Security Update for Windows 8 (KB2926765)
PATCH-15485Security Update for Windows 8.1 (KB2926765)
PATCH-15486Security Update for Windows Server 2003 x64 Edition (KB2926765)
PATCH-15487Security Update for Windows Vista for x64-based Systems (KB2926765)
PATCH-15488Security Update for Windows Server 2008 x64 Edition (KB2926765)
PATCH-15489Security Update for Windows 7 for x64-based Systems (KB2926765)
PATCH-15490Security Update for Windows Server 2008 R2 x64 Edition (KB2926765)
PATCH-15491Security Update for Windows 8 for x64-based Systems (KB2926765)
PATCH-15493Security Update for Windows 8.1 for x64-based Systems (KB2926765)
PATCH-15494Security Update for Windows Server 2012 R2 (KB2926765)
PATCH-15643Security Update for Windows Vista (KB2957189)
PATCH-15644Security Update for Windows Server 2008 (KB2957189)
PATCH-15645Security Update for Windows 7 (KB2957189)
PATCH-15646Security Update for Windows 8 (KB2957189)
PATCH-15647Security Update for Windows 8.1 (KB2957189)
PATCH-15648Security Update for Windows Vista for x64-based Systems (KB2957189)
PATCH-15649Security Update for Windows Server 2008 x64 Edition (KB2957189)
PATCH-15650Security Update for Windows 7 for x64-based Systems (KB2957189)
PATCH-15651Security Update for Windows Server 2008 R2 x64 Edition (KB2957189)
PATCH-15652Security Update for Windows 8 for x64-based Systems (KB2957189)
PATCH-15653Security Update for Windows Server 2012 (KB2957189)
PATCH-15654Security Update for Windows 8.1 for x64-based Systems (KB2957189)
PATCH-15655Security Update for Windows Server 2012 R2 (KB2957189)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234