Windows DNS Server Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.
🎯 Affected products17
- Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
- Windows Server 2008 for 32-bit Systems Service Pack 2
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
- Windows Server 2008 for x64-based Systems Service Pack 2
- Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server, version 20H2 (Server Core Installation)
✅ Remediation
KB5012647 (Security Update) — fixed build 10.0.17763.2803 KB5012604 (Security Update) — fixed build 10.0.20348.643 KB5012599 (Security Update) — fixed build 10.0.19042.1645 KB5012596 (Security Update) — fixed build 10.0.14393.5066 KB5012658 (Monthly Rollup) — fixed build 6.0.6003.21446 KB5012632 (Security Only) — fixed build 6.0.6003.21446 KB5012626 (Monthly Rollup) — fixed build 6.1.7601.25924 KB5012649 (Security Only) — fixed build 6.1.7601.25924 KB5012650 (Monthly Rollup) — fixed build 6.2.9200.23679 KB5012666 (Security Only) — fixed build 6.2.9200.23679 KB5012670 (Monthly Rollup) — fixed build 6.3.9600.20337 KB5012639 (Security Only) — fixed build 6.3.9600.20337
🔗 References (25)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24536
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647
- referencehttps://support.microsoft.com/help/5012647
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604
- referencehttps://support.microsoft.com/help/5012604
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599
- referencehttps://support.microsoft.com/help/5012599
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596
- referencehttps://support.microsoft.com/help/5012596
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658
- referencehttps://support.microsoft.com/help/5012658
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632
- referencehttps://support.microsoft.com/help/5012632
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626
- referencehttps://support.microsoft.com/help/5012626
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649
- referencehttps://support.microsoft.com/help/5012649
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650
- referencehttps://support.microsoft.com/help/5012650
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666
- referencehttps://support.microsoft.com/help/5012666
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670
- referencehttps://support.microsoft.com/help/5012670
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639
- referencehttps://support.microsoft.com/help/5012639