CVE-2022-35748 : Security Advisory and Response

This article provides detailed information about the HTTP.sys Denial of Service Vulnerability identified as CVE-2022-35748.

Understanding CVE-2022-35748

CVE-2022-35748 is a Denial of Service (DoS) vulnerability affecting various Microsoft Windows Server versions.

What is CVE-2022-35748?

The CVE-2022-35748 vulnerability, also known as the HTTP.sys Denial of Service Vulnerability, allows an attacker to disrupt services on affected Windows Server systems by sending specially crafted requests to the HTTP.sys driver.

The Impact of CVE-2022-35748

The impact of this vulnerability is rated as HIGH with a CVSS base score of 7.5. It can lead to a denial of service, causing disruption to critical services and potentially leading to system unavailability.

Technical Details of CVE-2022-35748

This section outlines specific technical details regarding CVE-2022-35748.

Vulnerability Description

The vulnerability arises from how the HTTP.sys driver improperly handles objects in memory, allowing a remote attacker to exploit this flaw and execute DoS attacks.

Affected Systems and Versions

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server version 20H2
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

Exploitation Mechanism

To exploit this vulnerability, an attacker sends malicious requests to the targeted system using HTTP.sys, causing a DoS condition by consuming system resources and making the service unavailable.

Mitigation and Prevention

It is crucial to take immediate steps to mitigate the risks associated with CVE-2022-35748.

Immediate Steps to Take

Apply relevant security patches provided by Microsoft to address this vulnerability.
Implement network level controls to filter out potentially malicious requests targeting HTTP.sys.

Long-Term Security Practices

Regularly monitor and update systems with the latest security patches to prevent similar vulnerabilities.

Patching and Updates

Make sure to keep systems up to date with the latest security updates from Microsoft to protect against CVE-2022-35748.