Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-28254

Windows DNS Server Remote Code Execution Vulnerability

Description

Windows DNS Server Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.4252affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.4252affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.1668affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.5850affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.5850affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22015affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.22015affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22015affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.26466affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.26466affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.24216affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.24216affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.20919affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.20919affected

References