Windows HTTP拒绝服务(CVE-2022-21907)漏洞复现

admin

102258
文章

87
评论

2022年7月4日17:36:43评论148 views字数 1054阅读3分30秒阅读模式

概述

HTTP协议堆栈中存在远程代码执行漏洞，由于HTTP协议栈(HTTP.sys)中的HTTP Trailer Support功能存在边界错误可导致缓冲区溢出。

受影响版本

- Windows    - 10 Version 1809 for 32-bit Systems    - 10 Version 1809 for x64-based Systems    - 10 Version 1809 for ARM64-based Systems    - 10 Version 21H1 for 32-bit Systems    - 10 Version 21H1 for x64-based System    - 10 Version 21H1 for ARM64-based Systems    - 10 Version 20H2 for 32-bit Systems    - 10 Version 20H2 for x64-based Systems    - 10 Version 20H2 for ARM64-based Systems    - 10 Version 21H2 for 32-bit Systems    - 10 Version 21H2 for x64-based Systems    - 10 Version 21H2 for ARM64-based Systems    - 11 for x64-based Systems    - 11 for ARM64-based Systems- Windows Server    - 2019    - 2019 (Core installation)    - 2022    - 2022 (Server Core installation)    - version 20H2 (Server Core Installation)

漏洞原理

由于HTTP.sys的缓冲区溢出从而导致的拒绝服务，蓝屏重启。由于HTTP.sys的缓冲区溢出从而导致的拒绝服务，蓝屏重启。

环境搭建

在windows 10操作系统中，调出控制面板->程序->启用或关闭Windows功能，勾选所有的 Internet Information Services 选项。