Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2024-20655

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.5329affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.5329affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.2227affected

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  • 10.0.25398.0 to < 10.0.25398.643affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.6614affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.6614affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.26910affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.26910affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.24664affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.24664affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.21765affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.21765affected

References