Detections
Analytics

KB5022339: Windows Server 2008 R2 Security Update (January 2023)

high Nessus Plugin ID 169781

Language:

Synopsis

The remote Windows host is affected by multiple vulnerabilities.

Description

The remote Windows host is missing security update 5022339. It is, therefore, affected by multiple vulnerabilities

 - Microsoft ODBC Driver Remote Code Execution Vulnerability (CVE-2023-21732)

 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-21681)

 - Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVE-2023-21561, CVE-2023-21730)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply Security Update 5022339 or Cumulative Update 5022338

See Also

https://support.microsoft.com/en-us/help/5022339

https://support.microsoft.com/help/5022338

https://support.microsoft.com/help/5022339

Plugin Details

Severity: High

ID: 169781

File Name: smb_nt_ms23_jan_5022339.nasl

Version: 1.8

Type: local

Agent: windows

Published: 1/10/2023

Updated: 6/17/2024

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2023-21732

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows_server_2008:r2

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 1/10/2023

Vulnerability Publication Date: 1/10/2023

Exploitable With

Core Impact

Reference Information

CVE: CVE-2023-21524, CVE-2023-21525, CVE-2023-21527, CVE-2023-21532, CVE-2023-21537, CVE-2023-21541, CVE-2023-21542, CVE-2023-21543, CVE-2023-21546, CVE-2023-21548, CVE-2023-21549, CVE-2023-21552, CVE-2023-21555, CVE-2023-21556, CVE-2023-21557, CVE-2023-21560, CVE-2023-21561, CVE-2023-21563, CVE-2023-21675, CVE-2023-21678, CVE-2023-21679, CVE-2023-21680, CVE-2023-21681, CVE-2023-21682, CVE-2023-21726, CVE-2023-21728, CVE-2023-21730, CVE-2023-21732, CVE-2023-21746, CVE-2023-21747, CVE-2023-21748, CVE-2023-21749, CVE-2023-21750, CVE-2023-21752, CVE-2023-21754, CVE-2023-21757, CVE-2023-21760, CVE-2023-21765, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774, CVE-2023-21776

IAVA: 2023-A-0025-S, 2023-A-0027-S

MSFT: MS23-5022338, MS23-5022339

MSKB: 5022338, 5022339