CVE-2020-16898

Description

<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.</p> <p>To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Advertisement packets to a remote Windows computer.</p> <p>The update addresses the vulnerability by correcting how the Windows TCP/IP stack handles ICMPv6 Router Advertisement packets.</p>

From the Tenable Blog

Microsoft’s October 2020 Patch Tuesday Addresses 87 CVEs including “Bad Neighbor” Windows TCP/IP Vulnerability (CVE-2020-16898)

Published: 2020-10-13

For the first time in seven months, Microsoft patches less than 100 CVEs, addressing 87 CVEs in its October release.

References

https://www.tenable.com/blog/microsoft-october-2020-patch-tuesday-87-cves-bad-neighbor-windows-tcp-ip-cve-2020-16898

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898

Details

Source: Mitre, NVD

Named Vulnerability: Ping of DeathNamed Vulnerability: Bad Neighbor

Risk Information

CVSS v2

CVSS v3

EPSS