cnvd - cnvd-2021-76467

CNVD-2021-76467

Vulnerability from cnvd - Published: 2021-10-12

Title

Microsoft Windows Server拒绝服务漏洞（CNVD-2021-76467）

Description

Windows Server是微软发布的一系列服务器操作系统的品牌名，它包括所有以“Windows Server”为品牌发布的Windows操作系统。 Microsoft Windows Server中的Windows DNS Server存在拒绝服务漏洞。目前没有详细的漏洞细节提供。

Severity

中

Patch Name

Microsoft Windows Server拒绝服务漏洞（CNVD-2021-76467）的补丁

Patch Description

Windows Server是微软发布的一系列服务器操作系统的品牌名，它包括所有以“Windows Server”为品牌发布的Windows操作系统。 Microsoft Windows Server中的Windows DNS Server存在拒绝服务漏洞。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34444

Reference

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34444

Impacted products

Name
['Microsoft Windows Server 2008 R2 SP1', 'Microsoft Windows Server 2008 SP2', 'Microsoft Windows Server 2012 R2', 'Microsoft Windows Server 2016', 'Microsoft Windows Server 2019', 'Microsoft Windows Server 2004', 'Microsoft Windows Server 20H2', 'Microsoft Windows Server 2012']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-34444",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-34444"
    }
  },
  "description": "Windows Server\u662f\u5fae\u8f6f\u53d1\u5e03\u7684\u4e00\u7cfb\u5217\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u7684\u54c1\u724c\u540d\uff0c\u5b83\u5305\u62ec\u6240\u6709\u4ee5\u201cWindows Server\u201d\u4e3a\u54c1\u724c\u53d1\u5e03\u7684Windows\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nMicrosoft Windows Server\u4e2d\u7684Windows DNS Server\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34444",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-76467",
  "openTime": "2021-10-12",
  "patchDescription": "Windows Server\u662f\u5fae\u8f6f\u53d1\u5e03\u7684\u4e00\u7cfb\u5217\u670d\u52a1\u5668\u64cd\u4f5c\u7cfb\u7edf\u7684\u54c1\u724c\u540d\uff0c\u5b83\u5305\u62ec\u6240\u6709\u4ee5\u201cWindows Server\u201d\u4e3a\u54c1\u724c\u53d1\u5e03\u7684Windows\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nMicrosoft Windows Server\u4e2d\u7684Windows DNS Server\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Windows Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2021-76467\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Windows Server 2008 R2 SP1",
      "Microsoft Windows Server 2008 SP2",
      "Microsoft Windows Server 2012 R2",
      "Microsoft Windows Server 2016",
      "Microsoft Windows Server 2019",
      "Microsoft Windows Server 2004",
      "Microsoft Windows Server 20H2",
      "Microsoft Windows Server 2012"
    ]
  },
  "referenceLink": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34444",
  "serverity": "\u4e2d",
  "submitTime": "2021-07-15",
  "title": "Microsoft Windows Server\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2021-76467\uff09"
}

CVE-2021-34444 (GCVE-0-2021-34444)

Vulnerability from cvelistv5 – Published: 2021-07-16 20:19 – Updated: 2024-08-04 00:12

Summary

Windows DNS Server Denial of Service Vulnerability

Severity ?

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

CWE

Denial of Service

Assigner

microsoft

References

URL

Tags

https://portal.msrc.microsoft.com/en-US/security-…

x_refsource_MISC

Impacted products

Vendor

Product

Version

Microsoft

Windows Server 2019

Affected: 10.0.0 , < 10.0.17763.2061 (custom)
cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2061:*:*:*:*:*:*:*

Microsoft	Windows Server 2019 (Server Core installation)	Affected: 10.0.0 , < 10.0.17763.2061 (custom) cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2061:::::::*
Microsoft	Windows Server version 2004	Affected: 10.0.0 , < 10.0.19041.1110 (custom) cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1110:::::::*
Microsoft	Windows Server version 20H2	Affected: 10.0.0 , < 10.0.19042.1110 (custom) cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1110:::::::*
Microsoft	Windows Server 2016	Affected: 10.0.0 , < 10.0.14393.4530 (custom) cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4530:::::::*
Microsoft	Windows Server 2016 (Server Core installation)	Affected: 10.0.0 , < 10.0.14393.4530 (custom) cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4530:::::::*
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.0 , < 6.0.6003.21167 (custom) cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167::::::x64:
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	Affected: 6.0.0 , < 6.0.6003.21167 (custom) cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167::::::x64: cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167::::::x86:
Microsoft	Windows Server 2008 Service Pack 2	Affected: 6.0.0 , < 6.0.6003.21167 (custom) cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167::::::x86:
Microsoft	Windows Server 2008 R2 Service Pack 1	Affected: 6.1.0 , < 6.1.7601.25661 (custom) cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25661::::::x64:
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	Affected: 6.0.0 , < 6.1.7601.25661 (custom) cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25661::::::x64:
Microsoft	Windows Server 2012	Affected: 6.2.0 , < 6.2.9200.23409 (custom) cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23409::::::x64:
Microsoft	Windows Server 2012 (Server Core installation)	Affected: 6.2.0 , < 6.2.9200.23409 (custom) cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23409::::::x64:
Microsoft	Windows Server 2012 R2	Affected: 6.3.0 , < 6.3.9600.20069 (custom) cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20069::::::x64:
Microsoft	Windows Server 2012 R2 (Server Core installation)	Affected: 6.3.0 , < 6.3.9600.20069 (custom) cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20069::::::x64:

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:12:50.270Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34444"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2061:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.2061",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2061:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2019 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.17763.2061",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1110:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server version 2004",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19041.1110",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.1110:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server version 20H2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.19042.1110",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4530:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.4530",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.4530:*:*:*:*:*:*:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2016 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14393.4530",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "32-bit Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21167",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167:*:*:*:*:*:x64:*",
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21167",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.21167:*:*:*:*:*:x86:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008  Service Pack 2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.0.6003.21167",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25661:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.25661",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.25661:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.1.7601.25661",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23409:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23409",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.23409:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.2.9200.23409",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20069:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20069",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.20069:*:*:*:*:*:x64:*"
          ],
          "platforms": [
            "x64-based Systems"
          ],
          "product": "Windows Server 2012 R2 (Server Core installation)",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "6.3.9600.20069",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2021-07-13T07:00:00+00:00",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Windows DNS Server Denial of Service Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Denial of Service",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-28T22:36:32.865Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34444"
        }
      ],
      "title": "Windows DNS Server Denial of Service Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2021-34444",
    "datePublished": "2021-07-16T20:19:35",
    "dateReserved": "2021-06-09T00:00:00",
    "dateUpdated": "2024-08-04T00:12:50.270Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2021-76467

CVE-2021-34444 (GCVE-0-2021-34444)

Tags

Sightings

Nomenclature