November 20, 2023
Severity Medium Analysis Summary Agent Tesla is a very popular spyware Trojan built for the.NET framework. Since its initial appearance in 2014, this has been deployed […]
Rewterz Threat Advisory – Wireshark Dissection Engine Denial of Service Vulnerability
May 23, 2019Rewterz Threat Alert – Shade Ransomware Hits High-Tech, Wholesale & Education Sectors in Multiple Countries
May 24, 2019Rewterz Threat Advisory – Wireshark Dissection Engine Denial of Service Vulnerability
May 23, 2019Rewterz Threat Alert – Shade Ransomware Hits High-Tech, Wholesale & Education Sectors in Multiple Countries
May 24, 2019
Severity
Medium
Analysis Summary
Multiple vulnerabilities have been reported in Microsoft PowerShell Core, which can be exploited by malicious, local users to bypass certain security restrictions and by malicious people to cause a DoS (Denial of Service).
CVE-2019-0981
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests.
CVE-2019-0980
A denial of service vulnerability exists when .NET Framework or .NET Core improperly handle web requests. This vulnerability is different from CVE-2019-0981.
CVE-2019-0733
A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka ‘Windows Defender Application Control Security Feature Bypass Vulnerability’.
Impact
- Denial of Service
- Security Bypass
Affected Vendors
Microsoft
Affected Products
- Microsoft PowerShell Core 6.1.x prior to 6.1.4
- Microsoft PowerShell Core 6.2.x prior to 6.2.1.
Remediation
Update to version 6.1.4 or 6.2.1.