Detections
Analytics

KB5041823: Windows Server 2008 R2 Security Update (August 2024)

critical Nessus Plugin ID 205455

Language:

Synopsis

The remote Windows host is affected by multiple vulnerabilities.

Description

The remote Windows host is missing security update 5041823. It is, therefore, affected by multiple vulnerabilities

 - Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability (CVE-2024-38199)

 - Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (CVE-2024-38140)

 - Windows TCP/IP Remote Code Execution Vulnerability (CVE-2024-38063)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Apply Security Update 5041823 or Cumulative Update 5041838

See Also

https://support.microsoft.com/help/5041823

https://support.microsoft.com/help/5041838

Plugin Details

Severity: Critical

ID: 205455

File Name: smb_nt_ms24_aug_5041823.nasl

Version: 1.5

Type: local

Agent: windows

Published: 8/13/2024

Updated: 9/24/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.5

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2024-38199

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows_server_2008:r2

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/13/2024

Vulnerability Publication Date: 8/13/2024

CISA Known Exploited Vulnerability Due Dates: 9/3/2024

Reference Information

CVE: CVE-2024-29995, CVE-2024-37968, CVE-2024-38063, CVE-2024-38114, CVE-2024-38115, CVE-2024-38116, CVE-2024-38117, CVE-2024-38118, CVE-2024-38120, CVE-2024-38121, CVE-2024-38122, CVE-2024-38125, CVE-2024-38127, CVE-2024-38128, CVE-2024-38130, CVE-2024-38131, CVE-2024-38134, CVE-2024-38140, CVE-2024-38144, CVE-2024-38151, CVE-2024-38152, CVE-2024-38153, CVE-2024-38154, CVE-2024-38180, CVE-2024-38193, CVE-2024-38196, CVE-2024-38198, CVE-2024-38199, CVE-2024-38214

IAVA: 2024-A-0499-S, 2024-A-0500-S

MSFT: MS24-5041823, MS24-5041838

MSKB: 5041823, 5041838