CVE-2016-0037 in Windows

Resumen

por MITRE

The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service (daemon outage) via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service Vulnerability."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2015-12-03
• Divulgación: 2016-02-10
• Moderación: aceptado
• Artículo: VDB-80878
• CPE: listo
• CWE: CWE-20 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.38155
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider, Police, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0037
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0037
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0037/