Vulnerability Details : CVE-2018-8337
A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity, aka "Windows Subsystem for Linux Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.
Products affected by CVE-2018-8337
- cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-8337
0.09%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 41 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-8337
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
1.8
|
3.4
|
NIST |
CWE ids for CVE-2018-8337
-
The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-8337
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8337
CVE-2018-8337 | Windows Subsystem for Linux Security Feature Bypass VulnerabilityPatch;Vendor Advisory
-
http://www.securityfocus.com/bid/105250
Microsoft Windows Subsystem for Linux CVE-2018-8337 Local Security Bypass VulnerabilityThird Party Advisory;VDB Entry
Jump to