CVE-2023-29355HighCVSS 5.3

DHCP Server Service Information Disclosure Vulnerability

Published
June 13, 2023
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2023-29355 →

📋 Description

What type of information could be disclosed by this vulnerability? The attacker might be able to guess the DHCP server's IP addresses pool information, which would otherwise not be disclosed.

🎯 Affected products10

  • Windows Server 2012
  • Windows Server 2012 (Server Core installation)
  • Windows Server 2012 R2
  • Windows Server 2012 R2 (Server Core installation)
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server 2022
  • Windows Server 2022 (Server Core installation)

✅ Remediation

KB5027222 (Security Update) — fixed build 10.0.17763.4499 KB5027225 (Security Update) — fixed build 10.0.20348.1787 KB5027319 (Security Hotpatch Update) — fixed build 10.0.20348.1784 KB5027219 (Security Update) — fixed build 10.0.14393.5989 KB5027283 (Monthly Rollup) — fixed build 6.2.9200.24314 KB5027281 (Security Only) — fixed build 6.2.9200.24314 KB5027271 (Monthly Rollup) — fixed build 6.3.9600.21013 KB5027282 (Security Only) — fixed build 6.3.9600.21013

🔗 References (17)