奇安信发布微软高危漏洞预警，Win10为主要影响目标

手机 2020-03-18 11:19:20 字数：1424

蓝鲸TMT频道3月14日讯，近日，奇安信威胁情报中心发布了Microsoft WindowsSMBv3服务远程代码执行漏洞通告。通告称，3月11日，国外某公司发布了一个近期微软安全补丁包设计的漏洞综述，其中包括一个威胁等级被标记为Critical的SMB服务远程代码执行漏洞(漏洞编号为CVE-2020-0796)，该漏洞存在于Windows的SMBv3(文件共享与打印服务)中。

据该公司描述，攻击者可以利用此漏洞，远程发送构造特殊的恶意数据，并且无需用户验证便可导致在目标系统上执行恶意代码，从而获取机器的完全控制权限。奇安信威胁情报中心红雨滴团队提醒，利用此漏洞可稳定造成系统崩溃，由于漏洞存在的信息已经扩散，并且有迹象表明黑客团伙正在积极地研究漏洞细节尝试利用，构成潜在的安全威胁。

支持该协议的设备包括Windows 8、Windows 8.1、Windows 10、Windows Server 2012 和 Windows Server 2016，但是从微软的通告来看受影响目标主要是Win10系统。值得注意的是，据市场调研机构NetMarketShare的最新数据显示，Win10系统目前市场占比为57.39%，并且随着Win7操作系统的正式停服，这一比例还将继续增长。因此，考虑到相关设备的数量级，该漏洞的潜在威胁较大，并且存在着大范围利用的可能，例如永恒之蓝事件等。

漏洞基本情况如下：

漏洞名称

Microsoft WindowsSMBv3服务远程代码执行漏洞

威胁类型

远程代码执行

威胁等级

严重

漏洞ID

CVE-2020-0796

利用场景

攻击者可以通过发送特殊构造的数据包触发漏洞，无需用户验证就可能导致控制目标系统，同时影响服务器与客户端系统。

受影响系统及应用版本

Windows 10 Version 1903 for 32-bit Systems

Windows 10 Version 1903 for ARM64-based Systems

Windows 10 Version 1903 for x64-based Systems

Windows 10 Version 1909 for 32-bit Systems

Windows 10 Version 1909 for ARM64-based Systems

Windows 10 Version 1909 for x64-based Systems

Windows Server, version 1903 (Server Core installation)

Windows Server, version 1909 (Server Core installation)

目前，微软已经发布了相应的安全补丁，奇安信强烈建议用户立即安装补丁，以免受此漏洞导致的风险。补丁安装可以访问如下链接：

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796

如暂时不方便安装补丁，微软建议执行以下命令禁用SMB 3.0的压缩功能：

Set-ItemProperty-Path"HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"DisableCompression -Type DWORD -Value 1 -Force

上一篇：社交不是万能的：从全球App月活最新排名看为啥支付宝能更上一层楼

下一篇：阿里成立本地生活大学，三年将推1000门课程服务1000万学员

0人参与回答

未添加任何数据~~

热点相关推荐

快捷栏目

Messages Timeline Exceptions Views6 Route Queries7 Mails Auth Gate Session Request

746.24ms2MBGET zixun/detail/{id?}.html

Booting (12.94ms)
Application (735.98ms)

6 templates were rendered

site.zixun.detail (resources/views/site/zixun/detail.blade.php)8blade
Params
0
prevArticle
1
nextArticle
2
newDetail
3
comment
4
hotnews
5
t
6
d
7
k

Params
0	`prevArticle`
1	`nextArticle`
2	`newDetail`
3	`comment`
4	`hotnews`
5	`t`
6	`d`
7	`k`

layouts.site.layout (resources/views/layouts/site/layout.blade.php)18blade


obLevel
__env
app
device
isMobile
errors
prevArticle
nextArticle
newDetail
comment
hotnews
t
d
k
__empty_1
__currentLoopData
loop
hotnewsVal

Params
0	`obLevel`
1	`__env`
2	`app`
3	`device`
4	`isMobile`
5	`errors`
6	`prevArticle`
7	`nextArticle`
8	`newDetail`
9	`comment`
10	`hotnews`
11	`t`
12	`d`
13	`k`
14	`__empty_1`
15	`__currentLoopData`
16	`loop`
17	`hotnewsVal`

layouts.site.top (resources/views/layouts/site/top.blade.php)18blade


obLevel
__env
app
device
isMobile
errors
prevArticle
nextArticle
newDetail
comment
hotnews
t
d
k
__empty_1
__currentLoopData
loop
hotnewsVal

Params
0	`obLevel`
1	`__env`
2	`app`
3	`device`
4	`isMobile`
5	`errors`
6	`prevArticle`
7	`nextArticle`
8	`newDetail`
9	`comment`
10	`hotnews`
11	`t`
12	`d`
13	`k`
14	`__empty_1`
15	`__currentLoopData`
16	`loop`
17	`hotnewsVal`

layouts.site.bottom (resources/views/layouts/site/bottom.blade.php)18blade


obLevel
__env
app
device
isMobile
errors
prevArticle
nextArticle
newDetail
comment
hotnews
t
d
k
__empty_1
__currentLoopData
loop
hotnewsVal

Params
0	`obLevel`
1	`__env`
2	`app`
3	`device`
4	`isMobile`
5	`errors`
6	`prevArticle`
7	`nextArticle`
8	`newDetail`
9	`comment`
10	`hotnews`
11	`t`
12	`d`
13	`k`
14	`__empty_1`
15	`__currentLoopData`
16	`loop`
17	`hotnewsVal`

common.upgrade_vip (resources/views/common/upgrade_vip.blade.php)18blade


obLevel
__env
app
device
isMobile
errors
prevArticle
nextArticle
newDetail
comment
hotnews
t
d
k
__empty_1
__currentLoopData
loop
hotnewsVal

Params
0	`obLevel`
1	`__env`
2	`app`
3	`device`
4	`isMobile`
5	`errors`
6	`prevArticle`
7	`nextArticle`
8	`newDetail`
9	`comment`
10	`hotnews`
11	`t`
12	`d`
13	`k`
14	`__empty_1`
15	`__currentLoopData`
16	`loop`
17	`hotnewsVal`

kefu.kefu (resources/views/kefu/kefu.blade.php)18blade


obLevel
__env
app
device
isMobile
errors
prevArticle
nextArticle
newDetail
comment
hotnews
t
d
k
__empty_1
__currentLoopData
loop
hotnewsVal

Params
0	`obLevel`
1	`__env`
2	`app`
3	`device`
4	`isMobile`
5	`errors`
6	`prevArticle`
7	`nextArticle`
8	`newDetail`
9	`comment`
10	`hotnews`
11	`t`
12	`d`
13	`k`
14	`__empty_1`
15	`__currentLoopData`
16	`loop`
17	`hotnewsVal`

uri: GET zixun/detail/{id?}.html
middleware: web
controller: App\Http\Controllers\Site\ZixunController@detail
namespace: App\Http\Controllers
prefix: /zixun
where
as: zixunDetail
file: app/Http/Controllers/Site/ZixunController.php:105-132

7 statements were executed720.41ms

select * from `news` where `news`.`id` = '65385' and `news`.`deleted_at` is null limit 12.16ms/app/Http/Controllers/Site/ZixunController.php:109zzshuju

Metadata
Bindings	0. 65385
Hints	Use `SELECT *` only if you need all columns from table `LIMIT` without `ORDER BY` causes non-deterministic results, depending on the query execution plan
Backtrace	14. /app/Http/Controllers/Site/ZixunController.php:109 22. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 56. /public/index.php:53

select * from `new_cates` where `new_cates`.`id` in ('47') and `new_cates`.`deleted_at` is null470μs/app/Http/Controllers/Site/ZixunController.php:109zzshuju

Metadata
Bindings	0. 47
Hints	Use `SELECT *` only if you need all columns from table
Backtrace	19. /app/Http/Controllers/Site/ZixunController.php:109 27. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 61. /public/index.php:53

select * from `news` where `news`.`deleted_at` is null order by `browse` desc limit 10708.89ms/app/Http/Controllers/Site/ZixunController.php:110zzshuju

Metadata
Hints	Use `SELECT *` only if you need all columns from table
Backtrace	12. /app/Http/Controllers/Site/ZixunController.php:110 20. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 54. /public/index.php:53

update `news` set `browse` = `browse` + 1, `updated_at` = '2025-04-26 14:30:36' where `id` = '65385' and `news`.`deleted_at` is null

4.11ms/app/Http/Model/News/News.php:170zzshuju

Metadata
Bindings	0. 2025-04-26 14:30:36 1. 65385
Backtrace	12. /app/Http/Model/News/News.php:170 13. /app/Http/Controllers/Site/ZixunController.php:111 21. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 55. /public/index.php:53

select * from `news` where `id` < '65385' and `newscate_id` = '47' and `news`.`deleted_at` is null order by `id` desc limit 1

3.37ms/app/Http/Controllers/Site/ZixunController.php:115zzshuju

Metadata
Bindings	0. 65385 1. 47
Hints	Use `SELECT *` only if you need all columns from table
Backtrace	13. /app/Http/Controllers/Site/ZixunController.php:115 21. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 55. /public/index.php:53

select * from `news` where `id` > '65385' and `newscate_id` = '47' and `news`.`deleted_at` is null order by `id` asc limit 1

1.02ms/app/Http/Controllers/Site/ZixunController.php:116zzshuju

Metadata
Bindings	0. 65385 1. 47
Hints	Use `SELECT *` only if you need all columns from table
Backtrace	13. /app/Http/Controllers/Site/ZixunController.php:116 21. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 55. /public/index.php:53

select * from `comments` where `news_id` = '65385'390μs/app/Http/Controllers/Site/ZixunController.php:117zzshuju

Metadata
Bindings	0. 65385
Hints	Use `SELECT *` only if you need all columns from table
Backtrace	12. /app/Http/Controllers/Site/ZixunController.php:117 20. /vendor/silber/page-cache/src/Middleware/CacheResponse.php:38 54. /public/index.php:53

web: array:2 [ "name" => "Guest" "user" => array:1 [ "guest" => true ] ]
api: array:2 [ "name" => "Guest" "user" => array:1 [ "guest" => true ] ]

_token: QD8hLpkZrPc2YuYmTPiTTGn53W5szv08PyX9JU9W
_previous: array:1 [ "url" => "http://data.winndoo.cn/zixun/detail/65385.html" ]
PHPDEBUGBAR_STACK_DATA: []

format: html
content_type: text/html; charset=UTF-8
status_text: OK
status_code: 200
request_query: []
request_request: []
request_headers: array:10 [ "accept-encoding" => array:1 [ 0 => "gzip, deflate" ] "accept" => array:1 [ ...
request_server: array:33 [ "USER" => "apache" "HOME" => "/usr/share/httpd" "HTTP_ACCEPT_ENCODING" => "gzip, de...
request_cookies: []
response_headers: array:5 [ "cache-control" => array:1 [ 0 => "no-cache, private" ] "date" => array:1 [ ...
path_info: /zixun/detail/65385.html
session_attributes: array:3 [ "_token" => "QD8hLpkZrPc2YuYmTPiTTGn53W5szv08PyX9JU9W" "_previous" => array:1 [ "u...

热点相关推荐

快捷栏目

提示信息