關(guān)于“Windows TCP/IP 遠(yuǎn)程代碼執(zhí)行漏洞”高危漏洞的預(yù)警
漏洞名稱：“Windows TCP/IP 遠(yuǎn)程代碼執(zhí)行漏洞”,。
漏洞情況：該漏洞編號為 CVE-2024-38063是存在于 Windows 操作系統(tǒng)TCP/IP 組件中的遠(yuǎn)程代碼執(zhí)行漏洞,。根據(jù)微軟官方介紹,，該漏洞最高嚴(yán)重等級為嚴(yán)重，CVSS 評分為 9.8,，Windows 系統(tǒng)的多個(gè)版本受此漏洞影響,。攻擊者可利用該漏洞實(shí)現(xiàn)遠(yuǎn)程代碼執(zhí)行,。漏洞成因在于 Windows 操作系統(tǒng) TCP/IP 組件中存在整數(shù)下溢漏洞，未經(jīng)身份驗(yàn)證的攻擊者可重復(fù)向 Windows 計(jì)算機(jī)發(fā)送 IPv6 數(shù)據(jù)包(包括特別構(gòu)建的數(shù)據(jù)包),從而實(shí)現(xiàn)遠(yuǎn)程代碼執(zhí)行,。
影響范圍：見附表
修復(fù)方法：升級 Windows 操作系統(tǒng)到最新版本
參考鏈接：https://www.cve.org/CVERecord?id=CVE-2024-38063,、https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063
附表：
序號 |
Windows 產(chǎn)品版本號 |
1 |
Windows 11 Version 24H2 for x64-based Systems |
2 |
Windows 11 Version 24H2 for ARM64-based Systems |
3 |
Windows Server 2012 R2 (Server Core installation) |
4 |
Windows Server 2012 R2 |
5 |
Windows Server 2012 (Server Core installation) |
6 |
Windows Server 2012 |
7 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
8 |
Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
9 |
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |
10 |
Windows Server 2008 for x64-based Systems Service Pack 2 |
11 |
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |
12 |
Windows Server 2008 for 32-bit Systems Service Pack 2 |
13 |
Windows Server 2016 (Server Core installation) |
14 |
Windows Server 2016 |
15 |
Windows 10 Version 1607 for x64-based Systems |
16 |
Windows 10 Version 1607 for 32-bit Systems |
17 |
Windows 10 for x64-based Systems |
18 |
Windows 10 for 32-bit Systems |
19 |
Windows Server 2022, 23H2 Edition (Server Core installation) |
20 |
Windows 11 Version 23H2 for x64-based Systems |
21 |
Windows 11 Version 23H2 for ARM64-based Systems |
22 |
Windows 10 Version 22H2 for 32-bit Systems |
23 |
Windows 10 Version 22H2 for ARM64-based Systems |
24 |
Windows 10 Version 22H2 for x64-based Systems |
25 |
Windows 11 Version 22H2 for x64-based Systems |
26 |
Windows 11 Version 22H2 for ARM64-based Systems |
27 |
Windows 10 Version 21H2 for x64-based Systems |
28 |
Windows 10 Version 21H2 for ARM64-based Systems |
29 |
Windows 10 Version 21H2 for 32-bit Systems |
30 |
Windows 11 version 21H2 for ARM64-based Systems |
31 |
Windows 11 version 21H2 for x64-based Systems |
32 |
Windows Server 2022 (Server Core installation) |
33 |
Windows Server 2022 |
34 |
Windows Server 2019 (Server Core installation) |
35 |
Windows Server 2019 |
36 |
Windows 10 Version 1809 for ARM64-based Systems |
37 |
Windows 10 Version 1809 for x64-based Systems |
38 |
Windows 10 Version 1809 for 32-bit Systems |