CVE-2019-1212 — CVE & Security Advisory Radar

🎯 CVE-2019-1212 CRITICAL 9.8 🔥 EPSS 6.7% 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2019-1212 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding.
To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server.
The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

Klassifikation & Betroffenheit:

Microsoft Windows Server 2008 R2 Service Pack 1 6.1.0 <publicationWindows 10 Version 1903 for x64-based Systems 10.0.0 <publicationWindows Server 2012 R2 (Server Core installation) 6.3.0 <publicationWindows Server 2016 (Server Core installation) 10.0.0 <publicationWindows Server 2016 10.0.0 <publicationWindows 10 Version 1903 for ARM64-based Systems 10.0.0 <publicationWindows 10 Version 1709 for 32-bit Systems 10.0.0 <publicationWindows 8.1 6.3.0 <publication

Improper Restriction of Operations within the Bounds of a Memory Buffer 🎯 High

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

🛡️ Empfohlene Mitigation: Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow prot…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-10 · Buffer Overflow via Environment Variable… (High) CAPEC-14 · Client-side Injection-induced Buffer Ove… (High) CAPEC-24 · Filter Failure through Buffer Overflow (High) CAPEC-42 · MIME Conversion (High) CAPEC-44 · Overflow Binary Resource File (Very High) CAPEC-45 · Buffer Overflow via Symbolic Links (High) CAPEC-100 · Overflow Buffers (Very High) CAPEC-123 · Buffer Manipulation (Very High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-69502 10.0 CVE-2026-69555 10.0 CVE-2026-65816 10.0 CVE-2026-65770 10.0 CVE-2026-65801 10.0

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

🔗 portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019…

Ausnutzungs-Zeitleiste:

Reserviert 2019

Veröffentlicht 08/2019

Heute 07.09.

CVSS-Vektor-Analyse: 9.8

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Veröffentlicht:14.08.2019

Aktualisiert:17.06.2026 02:28

Assigner (CNA):microsoft

EUVD-ID:EUVD-2019-9780

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-119: Memory Corruption ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Patch-Tuesday Update einspielen oder betroffene Dienste in Windows Defender isolieren.

Tier	2026-08-29	2026-09-06
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

9.8 CRITICAL

🇪🇺 EUVD

EPSS

6.7%

CVE-2019-1212 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

Microsoft

CVE-2019-1212 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server. The security update addresses the vulnerability by correcting how DHCP servers handle network packets.

CWE-119: Memory Corruption ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Patch-Tuesday Update einspielen oder betroffene Dienste in Windows Defender isolieren.

14.08.2019

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub