CVE-2020-1118 — Microsoft Windows Transport Layer Security Denial of Service Vulnerability
A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who succes…
Published: 2020-05-21 · CVSS: 8.6 · CVSS 3.1
A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot. The update addresses the vulnerability by changing the way TLS key exchange messages are validated.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7