Windows Network File System Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to win a race condition.
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.
🎯 Affected products17
- Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- Windows Server 2008 for 32-bit Systems Service Pack 2
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
- Windows Server 2008 for x64-based Systems Service Pack 2
- Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5015811 (Security Update) — fixed build 10.0.17763.3165 KB5015827 (Security Update) — fixed build 10.0.20348.825 KB5015807 (Security Update) — fixed build 10.0.19042.1826 KB5015808 (Security Update) — fixed build 10.0.14393.5246 KB5015866 (Monthly Rollup) — fixed build 6.0.6003.21569 KB5015870 (Security Only) — fixed build 6.0.6003.21569 KB5015861 (Monthly Rollup) — fixed build 6.1.7601.26022 KB5015862 (Security Only) — fixed build 6.1.7601.26022 KB5015863 (Monthly Rollup) — fixed build 6.2.9200.23771 KB5015875 (Security Only) — fixed build 6.2.9200.23771 KB5015874 (Monthly Rollup) — fixed build 6.3.9600.20478 KB5015877 (Security Only) — fixed build 6.3.9600.20478
🔗 References (25)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22028
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015811
- referencehttps://support.microsoft.com/help/5015811
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015827
- referencehttps://support.microsoft.com/help/5015827
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015807
- referencehttps://support.microsoft.com/help/5015807
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015808
- referencehttps://support.microsoft.com/help/5015808
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015866
- referencehttps://support.microsoft.com/help/5015866
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015870
- referencehttps://support.microsoft.com/help/5015870
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015861
- referencehttps://support.microsoft.com/help/5015861
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015862
- referencehttps://support.microsoft.com/help/5015862
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015863
- referencehttps://support.microsoft.com/help/5015863
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015875
- referencehttps://support.microsoft.com/help/5015875
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015874
- referencehttps://support.microsoft.com/help/5015874
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5015877
- referencehttps://support.microsoft.com/help/5015877