CVE-2022-32230 (CNNVD-202206-1215)
中文标题:
Microsoft Windows SMBv3 代码问题漏洞
英文标题:
SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
漏洞描述
中文描述:
Microsoft Windows SMB Client和Microsoft Windows SMB Server都是美国微软（Microsoft）公司的产品。Microsoft Windows SMB Client是一个应用软件。一个SMB客户端。Microsoft Windows SMB Server是一个网络文件共享协议。它允许计算机上的应用程序读取和写入文件以及从计算机网络中的服务器程序请求服务。 Microsoft Windows SMBv3 存在代码问题漏洞，该漏洞源于存在空指针解引用问题。
英文描述:
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Microsoft | Windows 10 Version 20H2 | - | < 19042.1706 | - |
cpe:2.3:a:microsoft:windows_10_version_20h2:*:*:*:*:*:*:*:*
|
| Microsoft | Windows Server Version 20H2 | - | < 19042.1706 | - |
cpe:2.3:a:microsoft:windows_server_version_20h2:*:*:*:*:*:*:*:*
|
| Microsoft | Windows 10 Version 21H1 | - | < 19042.1706 | - |
cpe:2.3:a:microsoft:windows_10_version_21h1:*:*:*:*:*:*:*:*
|
| Microsoft | Windows 10 Version 21H2 | - | < 19042.1706 | - |
cpe:2.3:a:microsoft:windows_10_version_21h2:*:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 20h2 | - | - |
cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 21h1 | - | - |
cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 21h2 | - | - |
cpe:2.3:o:microsoft:windows_10:21h2:*:*:*:*:*:*:*
|
| microsoft | windows_10 | 1809 | - | - |
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
|
| microsoft | windows_11 | - | - | - |
cpe:2.3:o:microsoft:windows_11:-:*:*:*:*:*:*:*
|
| microsoft | windows_server_2019 | - | - | - |
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-32230 |
2025-11-11 15:21:27 | 2025-11-11 07:37:33 |
| NVD | nvd_CVE-2022-32230 |
2025-11-11 14:58:19 | 2025-11-11 07:45:47 |
| CNNVD | cnnvd_CNNVD-202206-1215 |
2025-11-11 15:10:55 | 2025-11-11 07:57:19 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 代码问题
- cnnvd_id: 未提取 -> CNNVD-202206-1215
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 12 -> 10
- data_sources: ['cve'] -> ['cve', 'nvd']