CVE-2014-0254

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 32.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-12 · updated 2026-06-17
Weakness: CWE-20

Description

The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka "TCP/IP Version 6 (IPv6) Denial of Service Vulnerability."

Affected products

Microsoft Windows 8: all versions
Microsoft Windows Rt: all versions
Microsoft Windows Server 2012: all versions

References

http://osvdb.org/103159
http://secunia.com/advisories/56775
http://www.securityfocus.com/bid/65409
http://www.securitytracker.com/id/1029747
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-006
https://exchange.xforce.ibmcloud.com/vulnerabilities/90755
http://osvdb.org/103159
http://secunia.com/advisories/56775
http://www.securityfocus.com/bid/65409
http://www.securitytracker.com/id/1029747
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-006
https://exchange.xforce.ibmcloud.com/vulnerabilities/90755

Get alerted when CVE-2014-0254 or the next vulnerability affects your stack