CVE-2021-34499— Windows DNS Server Denial of Service Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows Server 2008 R2 Service Pack 1

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows DNS是美国微软（Microsoft）公司的一个域名解析服务。域名系统（DNS）是包含TCP / IP的行业标准协议套件之一，并且DNS客户端和DNS服务器共同为计算机和用户提供计算机名称到IP地址的映射名称解析服务。 Microsoft Windows DNS存在输入验证错误漏洞。以下产品和版本受到影响：Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server,

CVE-2021-34499 affects Microsoft Windows Server 2008 R2 Service Pack 1. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows DNS是美国微软（Microsoft）公司的一个域名解析服务。域名系统（DNS）是包含TCP / IP的行业标准协议套件之一，并且DNS客户端和DNS服务器共同为计算机和用户提供计算机名称到IP地址的映射名称解析服务。 Microsoft Windows DNS存在输入验证错误漏洞。以下产品和版本受到影响：Windows CVE-2021-34499 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2021-34499

I. Basic Information for CVE-2021-34499

Affected Products

II. Public POCs for CVE-2021-34499

III. Intelligence Information for CVE-2021-34499

Vendor Advisories for CVE-2021-34499 (2)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34499 x_refsource_MISC
• 🔗 CVE-2021-34499 - Security Update Guide - Microsoft - Windows DNS Server Denial of Service Vulnerability vendor-advisory patch

• https://www.cve.org/CVERecord?id=CVE-2021-34499

Same Patch Batch · Microsoft · 2021-07-14 · 90 CVEs total

Showing top 20 of 90 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2021-34499