CVE-2018-8546 - A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business De

CVE-2018-8546

Summary

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.

References

Vulnerable Configurations

cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:skype_for_business_basic:2016:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

bid	105802
confirm	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8546
sectrack	1042125

Last major update

24-08-2020 - 17:37

Published

14-11-2018 - 01:29

Last modified

24-08-2020 - 17:37