Microsoft HTTP.sys CVE-2018-0956 Denial of Service Vulnerability

description-logoDescription

A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.0 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive.

affected-products-logoAffected Applications

Windows 10
Windows Server 2016
Windows Server version 1709 (Server Core Installation)

CVE References

CVE-2018-0956