Skip to content
OpenAdvisories
High MSRC-CVE-2024-38231 1 CVE

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

Published Sep 10, 2024 · Updated Sep 10, 2024

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Are there additional actions I need to take after I have installed the update?
No action is required from customers who are using a single license server and who are not using workgroup-joined Windows Server 2008 terminal servers.
Customers using multiple license servers should refer to Use multiple remote desktop license servers for more information about the steps they need to take.
Additionally, for proper license server discovery, customers using workgroup-joined Windows Server 2008 terminal servers will need to ensure that they list the RD license servers they want these terminal servers to use under Use the specified Remote Desktop license servers as detailed on this page. The License server discovery mode called "Automatically discover a license server" will no longer be supported in workgroup-joined deployment.

Security updates
10.0.17763.6293 — https://support.microsoft.com/help/5043050
10.0.20348.2700 — https://support.microsoft.com/help/5042881
10.0.20348.2695 — https://support.microsoft.com/help/5042880
10.0.25398.1128 — https://support.microsoft.com/help/5043055
10.0.14393.7336 — https://support.microsoft.com/help/5043051
6.0.6003.22870 — https://support.microsoft.com/help/5043135
6.0.6003.22870 — https://support.microsoft.com/help/5043087
6.1.7601.27320 — https://support.microsoft.com/help/5043129
6.1.7601.27320 — https://support.microsoft.com/help/5043092
6.2.9200.25073 — https://support.microsoft.com/help/5043125
6.3.9600.22175 — https://support.microsoft.com/help/5043138

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References