CVE-2020-1118

HighCVSS 8.6/10Last modified Aug 19, 2026

Description

A denial of service vulnerability exists in the Windows implementation of Transport Layer Security (TLS) when it improperly handles certain key exchanges. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, a remote unauthenticated attacker could send a specially crafted request to a target system utilizing TLS 1.2 or lower, triggering the system to automatically reboot. The update addresses the vulnerability by changing the way TLS key exchange messages are validated.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2020
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-111807.8Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, SnapdraCVE-2020-111817.8Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in SnapCVE-2020-111829.8Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon ComCVE-2020-111836.7A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in CVE-2020-111849.8u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, CVE-2020-111857.8Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in CVE-2020-111865.5Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in SnapdrCVE-2020-111877.8Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, SnapdragCVE-2020-111889.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-111899.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon CoCVE-2020-11195.5<p>An information disclosure vulnerability exists when StartTileData.dll improperly handles objects in memory. An attacker who successfully CVE-2020-111909.1Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co
CVE-2020-1118: High severity, CVSS 8.6 | Vulnix