### CVE-2018-0833

#### Describe

The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability".


#### ImpactVersion

| Product             | CPU Architecture | Version | Update | Tested             |
| ------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows 8.1         | x86/x64          |         |        | &#10004; |
| Windows Rt 8.1      |                  |         |        |                    |
| Windows Server 2012 |                  | R2      |        |                    |

#### Patch

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833
```

#### Utilization

Test system Windows 8.1 x86

First, use a machine (test Used Kali) to run the Python script in the project, then use Windows 8.1 x86 to access the machine to the machine to run the script `\\192.168.1.8`, you can realize the blue screen

The effect picture is as follows

![CVE](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2018-0833.gif)

#### Analyze
- https://de4dcr0w.github.io/cve%E6%BC%8F%E6%B4%9E/SMBv3%E6%97%A0%E6%95%88%E6%8C%87%E9%92%88%E5%BC%95%E7%94%A8%E6%BC%8F%E6%B4%9E(CVE-2018-0833).html

#### ProjectSource

- [exploit-db](https://www.exploit-db.com/exploits/44189)
