header-logo
Suggest Exploit
vendor:
SharePoint Server
by:
Gil Mirmovitch, Gal Zror
7.5
CVSS
HIGH
DOS
399
CWE
Product Name: SharePoint Server
Affected Version From: SharePoint Server 2016
Affected Version To: SharePoint Server 2016
Patch Exists: YES
Related CWE: CVE-2018-8269
CPE: a:microsoft:sharepoint_server:2016
Metasploit:
Other Scripts:
Platforms Tested: Windows
2018

DOS Vulnerability in SharePoint 2016 Server

A vulnerability in Microsoft SharePoint Server could allow a remote attacker to make the server unavailable. The vulnerability is a result of the dependency SharePoint has in Microsoft.Data.OData library which was vulnerable to remote DOS (See CVE-2018-8269). The exploit is done by sending a crafted request that contains an OData filter that triggers the vulnerability in Microsoft.Data.OData library. Sending such request, will terminate the process that runs the server. By default, SharePoint server is configured to recover a terminated process, but it will do so only 10 times. If more than 10 malicious requests are sent in 5 minutes interval, the server will not recover and will be down until it is manually restarted.

Mitigation:

Apply the latest security updates provided by Microsoft to fix the vulnerability.
Source

Exploit-DB raw data: