Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-38067

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.6054affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.6054affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.2582affected

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  • 10.0.25398.0 to < 10.0.25398.1009affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.7159affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.7159affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22769affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.22769affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22769affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.27219affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.27219affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.24975affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.24975affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.22074affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.22074affected

References