Skip to main content
← All vulnerabilities
CVE-2020-1267

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated att

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka 'Local Security Authority Subsystem Service Denial of Service Vulnerability'.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Microsoft Windows 10 Version 2004 for ARM64-based Systems

    Version range not reported

  • Microsoft Windows 10 Version 2004 for 32-bit Systems

    Version range not reported

  • Microsoft Windows Server, version 2004 (Server Core installation)

    Version range not reported

  • Microsoft Windows

    10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems, 10 Version 1809 for 32-bit Systems, 10 Version 1809 for x64-based Systems, 10 Version 1809 for ARM64-based Systems, 10 Version 1709 for 32-bit Systems, 10 Version 1709 for x64-based Systems, 10 Version 1709 for ARM64-based Systems, 10 for 32-bit Systems, 10 for x64-based Systems, 10 Version 1607 for 32-bit Systems, 10 Version 1607 for x64-based Systems, 7 for 32-bit Systems Service Pack 1, 7 for x64-based Systems Service Pack 1, 8.1 for 32-bit systems, 8.1 for x64-based systems, RT 8.1

  • Microsoft Windows Server

    2019, 2019 (Core installation), 2016, 2016 (Core installation), 2008 for 32-bit Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for x64-based Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2 (Core installation), 2008 R2 for x64-based Systems Service Pack 1, 2008 R2 for x64-based Systems Service Pack 1 (Core installation), 2012, 2012 (Core installation), 2012 R2, 2012 R2 (Core installation)

  • Microsoft Windows 10 Version 1909 for 32-bit Systems

    Version range not reported

  • Microsoft Windows 10 Version 1909 for x64-based Systems

    Version range not reported

  • Microsoft Windows 10 Version 1909 for ARM64-based Systems

    Version range not reported

  • Microsoft Windows Server, version 1909 (Server Core installation)

    Version range not reported

  • Microsoft Windows 10 Version 1903 for 32-bit Systems

    Version range not reported

  • Microsoft Windows 10 Version 1903 for x64-based Systems

    Version range not reported

  • Microsoft Windows 10 Version 1903 for ARM64-based Systems

    Version range not reported

  • Microsoft Windows Server, version 1903 (Server Core installation)

    Version range not reported

  • Microsoft Windows 10 Version 2004 for x64-based Systems

    Version range not reported

References 1

portal.msrc.microsoft.com