Skip to content
OpenAdvisories
High MSRC-CVE-2021-34442 1 CVE

Windows DNS Server Remote Code Execution Vulnerability

Published Jul 13, 2021 · Updated Sep 14, 2021 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

If my server is not configured to be a DNS server, it is vulnerable?
No, this vulnerability is only exploitable if the server is configured to be a DNS server.

Security updates
10.0.17763.2061 — https://support.microsoft.com/help/5004244
10.0.19041.1110 — https://support.microsoft.com/help/5004237
10.0.14393.4530 — https://support.microsoft.com/help/5004238
6.0.6003.21167 — https://support.microsoft.com/help/5004305
6.0.6003.21167 — https://support.microsoft.com/help/5004299
6.1.7601.25661 — https://support.microsoft.com/help/5004289
6.1.7601.25661 — https://support.microsoft.com/help/5004307
6.2.9200.23409 — https://support.microsoft.com/help/5004294
6.2.9200.23409 — https://support.microsoft.com/help/5004302
6.3.9600.20069 — https://support.microsoft.com/help/5004298
6.3.9600.20069 — https://support.microsoft.com/help/5004285

Vulnerabilities 1

Revision history

  1. #2

    The following revisions have been made: 1) In the Security Updates table, corrected the impact entries to Remote Code Execution. 2) The CVSS scores have been updated. These are informational changes only. Customers who have successfully installed the update do not need to take any further action.

  2. #1

    Information published.

References