Windows DNS Server Remote Code Execution Vulnerability

The remote Windows host is missing security update 5023764. It is, therefore, affected by multiple vulnerabilities

  - Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability (CVE-2023-23415)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2023-21708, CVE-2023-23405,     CVE-2023-24869, CVE-2023-24908)

  - Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability     (CVE-2023-23385)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5023702. It is, therefore, affected by multiple vulnerabilities

  - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data     past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully     exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it     unusable) and/or arbitrary code execution in the TPM context. (CVE-2023-1017)

  - An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end     of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this     vulnerability can read or access sensitive data stored in the TPM. (CVE-2023-1018)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2023-21708, CVE-2023-23405,     CVE-2023-24869, CVE-2023-24908)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5023697. It is, therefore, affected by multiple vulnerabilities

  - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data     past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully     exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it     unusable) and/or arbitrary code execution in the TPM context. (CVE-2023-1017)

  - An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end     of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this     vulnerability can read or access sensitive data stored in the TPM. (CVE-2023-1018)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2023-21708, CVE-2023-23405,     CVE-2023-24869, CVE-2023-24908)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5023705. It is, therefore, affected by multiple vulnerabilities

  - An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data     past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully     exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it     unusable) and/or arbitrary code execution in the TPM context. (CVE-2023-1017)

  - An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end     of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this     vulnerability can read or access sensitive data stored in the TPM. (CVE-2023-1018)

  - Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVE-2023-21708, CVE-2023-23405,     CVE-2023-24869, CVE-2023-24908)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
172535	KB5023764: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (March 2023)	Nessus	Windows : Microsoft Bulletins	critical
172533	KB5023702: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2023)	Nessus	Windows : Microsoft Bulletins	critical
172532	KB5023697: Windows 10 Version 1607 and Windows Server 2016 Security Update (March 2023)	Nessus	Windows : Microsoft Bulletins	critical
172518	KB5023705: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-23400

high

Tenable Plugins

critical

critical

critical

critical