Fragmented IP Packet Information Disclosure Vulnerability in Windows TCP/IP Stack

Fragmented IP Packet Information Disclosure Vulnerability in Windows TCP/IP Stack

CVE-2018-8493 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosure Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Learn more about our Cis Benchmark Audit For Server Software.