CVE-2021-26879: Windows Network Address Translation (NAT) Denial of Service Vulnerability

Overview

Severity

High (CVSS 7.5)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Category

Denial of Service

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2021-Mar

Released

2021-03-09

EPSS Score

23.96% (percentile: 96.0%)

Affected Products (17)

Windows

• Windows 10 Version 1803 for x64-based Systems
• Windows 10 Version 1809 for x64-based Systems
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Windows 10 Version 1909 for x64-based Systems
• Windows Server, version 1909 (Server Core installation)
• Windows 10 Version 2004 for x64-based Systems
• Windows Server, version 2004 (Server Core installation)
• Windows 10 Version 20H2 for x64-based Systems
• Windows Server, version 20H2 (Server Core Installation)
• Windows 10 for x64-based Systems
• Windows 10 Version 1607 for x64-based Systems
• Windows Server 2016
• Windows Server 2016 (Server Core installation)
• Windows 8.1 for x64-based systems
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)

Security Updates (8)

• 5000809
• 5000822
• 5000808
• 5000802
• 5000807
• 5000803
• 5000848
• 5000853

Acknowledgments

Huichen Lin and Dong Seong Kim of <a href="https://www.itee.uq.edu.au/">School of Information Technology and Electrical Engineering - The University of Queensland</a>

Revision History

• 2021-03-09: Information published.