CVE-2024-26215

DHCP Server Service Denial of Service Vulnerability

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215	Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2016::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::

History

08 Jan 2025, 16:17

Type	Values Removed	Values Added
First Time		Microsoft windows Server 2022 23h2 Microsoft windows Server 2008 Microsoft windows Server 2022 Microsoft windows Server 2012 Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft
CWE		NVD-CWE-noinfo
CPE		cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:* cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_server_2022_23h2:::::::: cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::: cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215 - Vendor Advisory

Information

Published : 2024-04-09 17:15

Updated : 2025-01-08 16:17

NVD link : CVE-2024-26215

Mitre link : CVE-2024-26215

CVE.ORG link : CVE-2024-26215

JSON object : View

Products Affected

microsoft

windows_server_2008
windows_server_2019
windows_server_2012
windows_server_2022_23h2
windows_server_2022
windows_server_2016

CWE

CWE-400

Uncontrolled Resource Consumption

NVD-CWE-noinfo

{"id": "CVE-2024-26215", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-04-09T17:15:40.240", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26215", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "DHCP Server Service Denial of Service Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de denegaci\u00f3n de servicio del servicio del servidor DHCP"}], "lastModified": "2025-01-08T16:17:13.453", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "412F0026-BBE6-4F7D-ABC2-56E9F1791122", "versionEndExcluding": "10.0.14393.6897"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EAAB276-D0E4-41CA-8A25-4DE9FC90543E", "versionEndExcluding": "10.0.17763.5696"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7103C832-A4FB-4373-8A93-291E7A89B4AA", "versionEndExcluding": "10.0.20348.2402"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2B61B79-FEE5-4041-918D-6FE2C92771DC", "versionEndExcluding": "10.0.25398.830"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}