Cloudanix VulnDB

CVE-2018-0886

High · 7.0

CVSS

7.0

EPSS

82.0%

Published

Mar 14, 2018

CISA due date

—

The record

The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Desktop 12 SP3 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Desktop 12 SP4 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Software Development Kit 12 SP3 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Software Development Kit 12 SP4 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Software Development Kit 12 SP5 freerdp 0 2.1.2-12.20.1
SUSE:Linux Enterprise Workstation Extension 12 SP3 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Workstation Extension 12 SP4 freerdp 0 2.0.0~git.1463131968.4e66df7-12.8.1
SUSE:Linux Enterprise Workstation Extension 12 SP5 freerdp 0 2.1.2-12.20.1
SUSE:Linux Enterprise Workstation Extension 12 SP5 vinagre 0 3.20.2-16.3.3
SUSE:Linux Enterprise Workstation Extension 15 freerdp 0 2.0.0~rc4-3.3.1
openSUSE:Tumbleweed freerdp2 0 2.4.0-2.1
openSUSE:Tumbleweed python-pyspnego 0 0.5.0-1.1
openSUSE:Tumbleweed python-pyspnego 0 0.11.2-1.4

Related vulnerabilities