SB2024051443 - Multiple vulnerabilities in Microsoft Windows Routing and Remote Access Service (RRAS)
Published: May 14, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Numeric Truncation Error (CVE-ID: CVE-2024-30009)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
2) Numeric Truncation Error (CVE-ID: CVE-2024-30023)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
3) Numeric Truncation Error (CVE-ID: CVE-2024-30024)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
4) Numeric Truncation Error (CVE-ID: CVE-2024-30022)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
5) Numeric Truncation Error (CVE-ID: CVE-2024-30014)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
6) Numeric Truncation Error (CVE-ID: CVE-2024-30029)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
7) Numeric Truncation Error (CVE-ID: CVE-2024-30015)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to numeric truncation error in Windows Routing and Remote Access Service (RRAS). A remote attacker can trick a client to connect to a malicious server and execute arbitrary code on the target system.
Remediation
Install update from vendor's website.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30009
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30023
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30024
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30022
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30014
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30029
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-30015