| Vulnerability Name | Remote Code Execution Vulnerability in Windows Network File System |
| Severity Rating | HIGH |
| Software Affected |
|
| CVE Name | CVE-2020-17051 |
Overview
A vulnerability has been reported in Microsoft Windows Network File System (NFS) which could allow a remote attacker to execute arbitrary code on a targeted system.
Description
This vulnerability exists in Network File System (NFS) due to improper handling of objects in memory. A remote attacker could exploit this vulnerability by sending a specially crafted request to an affected system which could trigger a heap overflow. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system.
Solution
Apply appropriate patches as mentioned in Microsoft Security Guidance
https://portal.msrc.microsoft.com/en-us/security-guidance
Vendor Information
Microsoft
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17051
References
Threatpost
https://threatpost.com/microsoft-patch-tuesday-critical-bugs/161098/
Sophos
https://news.sophos.com/en-us/2020/11/10/november-patch-tuesday-fixes-close-112-holes-including-one-already-being-
exploited
McAfee
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-17051-remote-kernel-heap-overflow-in-nfsv3-windows-
server/
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Note: Any unusual activity or attack should be reported immediately at incident@cert-in.org.in, cert.ksitm@kerala.gov.in with the relevant logs for analysis and taking further appropriate actions.