關(guān)于“Windows TCP/IP 遠程代碼執(zhí)行漏洞”高危漏洞的預(yù)警
漏洞名稱：“Windows TCP/IP 遠程代碼執(zhí)行漏洞”。
漏洞情況：該漏洞編號為 CVE-2024-38063是存在于 Windows 操作系統(tǒng)TCP/IP 組件中的遠程代碼執(zhí)行漏洞。根據(jù)微軟官方介紹，該漏洞最高嚴重等級為嚴重，CVSS 評分為 9.8，Windows 系統(tǒng)的多個版本受此漏洞影響。攻擊者可利用該漏洞實現(xiàn)遠程代碼執(zhí)行。漏洞成因在于 Windows 操作系統(tǒng) TCP/IP 組件中存在整數(shù)下溢漏洞，未經(jīng)身份驗證的攻擊者可重復(fù)向 Windows 計算機發(fā)送 IPv6 數(shù)據(jù)包(包括特別構(gòu)建的數(shù)據(jù)包),從而實現(xiàn)遠程代碼執(zhí)行。
影響范圍：見附表
修復(fù)方法：升級 Windows 操作系統(tǒng)到最新版本
參考鏈接：https://www.cve.org/CVERecord?id=CVE-2024-38063、https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063
附表：
序號 |
Windows 產(chǎn)品版本號 |
1 |
Windows 11 Version 24H2 for x64-based Systems |
2 |
Windows 11 Version 24H2 for ARM64-based Systems |
3 |
Windows Server 2012 R2 (Server Core installation) |
4 |
Windows Server 2012 R2 |
5 |
Windows Server 2012 (Server Core installation) |
6 |
Windows Server 2012 |
7 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
8 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
9 |
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |
10 |
Windows Server 2008 for x64-based Systems Service Pack 2 |
11 |
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |
12 |
Windows Server 2008 for 32-bit Systems Service Pack 2 |
13 |
Windows Server 2016 (Server Core installation) |
14 |
Windows Server 2016 |
15 |
Windows 10 Version 1607 for x64-based Systems |
16 |
Windows 10 Version 1607 for 32-bit Systems |
17 |
Windows 10 for x64-based Systems |
18 |
Windows 10 for 32-bit Systems |
19 |
Windows Server 2022, 23H2 Edition (Server Core installation) |
20 |
Windows 11 Version 23H2 for x64-based Systems |
21 |
Windows 11 Version 23H2 for ARM64-based Systems |
22 |
Windows 10 Version 22H2 for 32-bit Systems |
23 |
Windows 10 Version 22H2 for ARM64-based Systems |
24 |
Windows 10 Version 22H2 for x64-based Systems |
25 |
Windows 11 Version 22H2 for x64-based Systems |
26 |
Windows 11 Version 22H2 for ARM64-based Systems |
27 |
Windows 10 Version 21H2 for x64-based Systems |
28 |
Windows 10 Version 21H2 for ARM64-based Systems |
29 |
Windows 10 Version 21H2 for 32-bit Systems |
30 |
Windows 11 version 21H2 for ARM64-based Systems |
31 |
Windows 11 version 21H2 for x64-based Systems |
32 |
Windows Server 2022 (Server Core installation) |
33 |
Windows Server 2022 |
34 |
Windows Server 2019 (Server Core installation) |
35 |
Windows Server 2019 |
36 |
Windows 10 Version 1809 for ARM64-based Systems |
37 |
Windows 10 Version 1809 for x64-based Systems |
38 |
Windows 10 Version 1809 for 32-bit Systems |