Detections
Analytics
KB5031356: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (October 2023)
critical Nessus Plugin ID 182854
Language:
Synopsis
The remote Windows host is affected by multiple vulnerabilities.Description
The remote Windows host is missing security update 5031356. It is, therefore, affected by multiple vulnerabilities- The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. (CVE-2023-44487)
- Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36577)
- Windows IIS Server Elevation of Privilege Vulnerability (CVE-2023-36434)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply Security Update 5031356See Also
Plugin Details
Severity: Critical
ID: 182854
File Name: smb_nt_ms23_oct_5031356.nasl
Version: 1.12
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/10/2023
Updated: 6/17/2024
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.1
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2023-36577
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CVSS Score Source: CVE-2023-36434
Vulnerability Information
CPE: cpe:/o:microsoft:windows_10_22h2, cpe:/o:microsoft:windows_10_21h2
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/10/2023
Vulnerability Publication Date: 10/10/2023
CISA Known Exploited Vulnerability Due Dates: 10/31/2023, 12/7/2023
Exploitable With
Core Impact
Reference Information
CVE: CVE-2023-35349, CVE-2023-36431, CVE-2023-36434, CVE-2023-36436, CVE-2023-36438, CVE-2023-36557, CVE-2023-36563, CVE-2023-36564, CVE-2023-36567, CVE-2023-36570, CVE-2023-36571, CVE-2023-36572, CVE-2023-36573, CVE-2023-36574, CVE-2023-36575, CVE-2023-36576, CVE-2023-36577, CVE-2023-36578, CVE-2023-36579, CVE-2023-36581, CVE-2023-36582, CVE-2023-36583, CVE-2023-36584, CVE-2023-36585, CVE-2023-36589, CVE-2023-36590, CVE-2023-36591, CVE-2023-36592, CVE-2023-36593, CVE-2023-36594, CVE-2023-36596, CVE-2023-36598, CVE-2023-36602, CVE-2023-36603, CVE-2023-36605, CVE-2023-36606, CVE-2023-36697, CVE-2023-36698, CVE-2023-36701, CVE-2023-36702, CVE-2023-36709, CVE-2023-36710, CVE-2023-36711, CVE-2023-36712, CVE-2023-36713, CVE-2023-36717, CVE-2023-36718, CVE-2023-36720, CVE-2023-36721, CVE-2023-36722, CVE-2023-36723, CVE-2023-36724, CVE-2023-36725, CVE-2023-36726, CVE-2023-36729, CVE-2023-36731, CVE-2023-36732, CVE-2023-36743, CVE-2023-36776, CVE-2023-36902, CVE-2023-38159, CVE-2023-38166, CVE-2023-41765, CVE-2023-41766, CVE-2023-41767, CVE-2023-41768, CVE-2023-41769, CVE-2023-41770, CVE-2023-41771, CVE-2023-41772, CVE-2023-41773, CVE-2023-41774, CVE-2023-44487