CVE-2022-21907 Windows HTTP拒绝服务漏洞复现

1 漏洞信息

漏洞名称	Windows HTTP拒绝服务漏洞复现
漏洞编号	CVE-2022-21907
危害等级	高危
CVSS评分	9.8
漏洞类型	系统漏洞
漏洞厂商	微软
漏洞组件	IIS
受影响版本	- Windows - 10 Version 1809 for 32-bit Systems - 10 Version 1809 for x64-based Systems - 10 Version 1809 for ARM64-based Systems - 10 Version 21H1 for 32-bit Systems - 10 Version 21H1 for x64-based System - 10 Version 21H1 for ARM64-based Systems - 10 Version 20H2 for 32-bit Systems - 10 Version 20H2 for x64-based Systems - 10 Version 20H2 for ARM64-based Systems - 10 Version 21H2 for 32-bit Systems - 10 Version 21H2 for x64-based Systems - 10 Version 21H2 for ARM64-based Systems - 11 for x64-based Systems - 11 for ARM64-based Systems - Windows Server - 2019 - 2019 (Core installation) - 2022 - 2022 (Server Core installation) - version 20H2 (Server Core Installation)
漏洞概述	HTTP协议堆栈中存在远程代码执行漏洞，由于HTTP协议栈(HTTP.sys)中的HTTP Trailer Support功能存在边界错误可导致缓冲区溢出。

2 环境搭建

2.1 环境概述

1. Windows 10操作系统

2.2 搭建过程

Windows 10 调出控制面板->程序->启用或关闭Windows功能，勾选所有的Internet Information Services选项。

访问靶机的ip地址，发现成功搭建了IIS服务。

3 漏洞复现

1.攻击机运行POC

2.过一段时间后，发现Windows蓝屏

3.返回攻击机查看，发现最底下多了年两行，经过判断，该两行输出是提示漏洞攻击成功。

4 修复建议

1、更新Windows系统