KnowSafe 安全预警：KnowSafe 安全团队监测到编号 AVD-2019-0785 的安全漏洞（危害等级：高危）已公开披露，相关用户应尽快排查并完成修复。
漏洞介绍
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive.
To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. However, the DHCP server must be set to failover mode for the attack to succeed.
The security update addresses the vulnerability by correcting how DHCP failover servers handle network packets.
影响范围
系统：microsoft windows_server_2012（版本 -）
系统：microsoft windows_server_2012（版本 r2）
系统：microsoft windows_server_2016（版本 -）
系统：microsoft windows_server_2016（版本 1803）
系统：microsoft windows_server_2016（版本 1903）
系统：microsoft windows_server_2019（版本 -）
解决方案
官方补丁：https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2019-0785
参考信息
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0785
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0785
KnowSafe 将持续跟踪该漏洞的利用情况与修复进展，如需漏洞管理与应急响应支持，欢迎联系 KnowSafe 安全团队。