Check Point Advisories

Microsoft DirectAccess ICMP Denial of Service (MS13-064; CVE-2013-3182)

Check Point Reference:	CPAI-2013-2542
Date Published:	13 Aug 2013
Severity:	High
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2013-3182
Protection Provided by:
Who is Vulnerable?	Windows 2012 server
Vulnerability Description	A denial of service vulnerability has been reported in Windows 2012 server.
Update/Patch Avaliable	Apply patches from: MS13-064
Vulnerability Details	The vulnerability is due to the server's inability to handle truncated IPv6 header inside ICMP error message payload. Remote attackers may exploit this issue by sending specially crafted ICMP packets to the server. Successful exploitation may cause the server to crash, resulting in a denial of service condition.