Summary
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
Are there additional actions I need to take after I have installed the update?
No action is required from customers who are using a single license server and who are not using workgroup-joined Windows Server 2008 terminal servers.
Customers using multiple license servers should refer to Use multiple remote desktop license servers for more information about the steps they need to take.
Additionally, for proper license server discovery, customers using workgroup-joined Windows Server 2008 terminal servers will need to ensure that they list the RD license servers they want these terminal servers to use under Use the specified Remote Desktop license servers as detailed on this page. The License server discovery mode called "Automatically discover a license server" will no longer be supported in workgroup-joined deployment.
Security updates
10.0.17763.6293 — https://support.microsoft.com/help/5043050
10.0.20348.2700 — https://support.microsoft.com/help/5042881
10.0.20348.2695 — https://support.microsoft.com/help/5042880
10.0.25398.1128 — https://support.microsoft.com/help/5043055
10.0.14393.7336 — https://support.microsoft.com/help/5043051
6.0.6003.22870 — https://support.microsoft.com/help/5043135
6.0.6003.22870 — https://support.microsoft.com/help/5043087
6.1.7601.27320 — https://support.microsoft.com/help/5043129
6.1.7601.27320 — https://support.microsoft.com/help/5043092
6.2.9200.25073 — https://support.microsoft.com/help/5043125
6.3.9600.22175 — https://support.microsoft.com/help/5043138
Vulnerabilities 1
-
Medium 6.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-38231 Windows Remote Desktop Licensing Service Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38231
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss