CVE-2022-21907 - Security Update Guide - Microsoft - HTTP Protocol Stack Remote...
source link: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21907
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
-
- Customer Guidance
-
-
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2022-21907Released: Jan 11, 2022 Last updated: Jan 12, 2022
Please see Common Vulnerability Scoring System for more information on the definition of these metrics.
Exploitability
Mitigations
Windows Server 2019 and Windows 10 version 1809 are not vulnerable by default. Unless you have enabled the HTTP Trailer Support via EnableTrailerSupport registry value, the systems are not vulnerable.
Delete the DWORD registry value "EnableTrailerSupport" if present under:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters
This mitigation only applies to Windows Server 2019 and Windows 10, version 1809 and does not apply to Windows 10, version 20H2 and newer.
How could an attacker exploit this vulnerability?
In most situations, an unauthenticated attacker could send a specially crafted packet to a targeted server utilizing the HTTP Protocol Stack (http.sys) to process packets.
Is this wormable?
Yes. Microsoft recommends prioritizing the patching of affected servers.
Windows 10, Version 1909 is not in the Security Updates table. Is it affected by this vulnerability?
No, the vulnerable code does not exist in Windows 10, version 1909. It is not affected by this vulnerability.
Is the EnableTrailerSupport registry key present in any other platform than Windows Server 2019 and Windows 10, version 1809?
No, the registry key is only present in Windows Server 2019 and Windows 10, version 1809.
Acknowledgements
Security Updates
Disclaimer
Revisions
Clarified the mitigation and added FAQs. These are informational changes only.
Information published.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK