PT-2024-1734 · Microsoft · Windows Dns Client+1

Published 2024-02-13 · Updated 2024-05-29 · CVE-2024-21342

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows DNS Client (affected versions not specified)

Description The issue is related to insufficient input validation in the Windows DNS Client component, which can be exploited by a remote attacker to cause a denial of service. This can affect the system's operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2024-01442

CVE-2024-21342

Affected Products

Windows

Windows Dns Client

References · 8

• https://bdu.fstec.ru/vul/2024-01442 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21342 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21342 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21342 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-21342 · Vendor Advisory
• https://t.me/cvenotify/72219 · Telegram Post
• https://twitter.com/CVEnew/status/1757469623036035212 · Twitter Post