Test ID:	1.3.6.1.4.1.25623.1.0.817230
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Multiple Vulnerabilities (KB4565524)
Summary:	This host is missing a critical security; update according to Microsoft KB4565524
Description:	Summary: This host is missing a critical security update according to Microsoft KB4565524 Vulnerability Insight: Multiple flaws exist due to: - Windows Domain Name System servers fail to properly handle requests (SIGRed, CVE-2020-1350). - Windows Event Logging Service fails to properly handle memory. - Windows Network Location Awareness Service fails to properly handle objects in memory. - Windows Jet Database Engine fails to properly handle objects in memory. - Windows Network Connections Service fails to properly handle objects in memory. - Windows Cryptography Next Generation (CNG) Key Isolation service fails to properly handle memory. Please see the references for more information about the vulnerabilities. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information and denial of service attacks. Affected Software/OS: - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 - Microsoft Windows Server 2012 - Microsoft Windows 7 for x64-based Systems Service Pack 1 - Microsoft Windows 7 for 32-bit Systems Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-1085 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1085 Common Vulnerability Exposure (CVE) ID: CVE-2020-1267 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1267 Common Vulnerability Exposure (CVE) ID: CVE-2020-1333 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1333 Common Vulnerability Exposure (CVE) ID: CVE-2020-1350 http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350 Common Vulnerability Exposure (CVE) ID: CVE-2020-1351 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1351 Common Vulnerability Exposure (CVE) ID: CVE-2020-1354 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1354 Common Vulnerability Exposure (CVE) ID: CVE-2020-1359 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1359 Common Vulnerability Exposure (CVE) ID: CVE-2020-1360 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1360 Common Vulnerability Exposure (CVE) ID: CVE-2020-1365 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1365 Common Vulnerability Exposure (CVE) ID: CVE-2020-1371 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1371 Common Vulnerability Exposure (CVE) ID: CVE-2020-1373 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1373 Common Vulnerability Exposure (CVE) ID: CVE-2020-1374 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1374 Common Vulnerability Exposure (CVE) ID: CVE-2020-1384 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1384 Common Vulnerability Exposure (CVE) ID: CVE-2020-1389 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1389 Common Vulnerability Exposure (CVE) ID: CVE-2020-1390 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1390 Common Vulnerability Exposure (CVE) ID: CVE-2020-1396 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1396 Common Vulnerability Exposure (CVE) ID: CVE-2020-1397 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1397 Common Vulnerability Exposure (CVE) ID: CVE-2020-1400 https://www.zerodayinitiative.com/advisories/ZDI-20-924/ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1400 Common Vulnerability Exposure (CVE) ID: CVE-2020-1401 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1401 Common Vulnerability Exposure (CVE) ID: CVE-2020-1402 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1402 Common Vulnerability Exposure (CVE) ID: CVE-2020-1403 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1403 Common Vulnerability Exposure (CVE) ID: CVE-2020-1407 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1407 Common Vulnerability Exposure (CVE) ID: CVE-2020-1408 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1408 Common Vulnerability Exposure (CVE) ID: CVE-2020-1409 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1409 Common Vulnerability Exposure (CVE) ID: CVE-2020-1410 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1410 Common Vulnerability Exposure (CVE) ID: CVE-2020-1412 Cisco Security Advisory: 20210217 Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1412 Common Vulnerability Exposure (CVE) ID: CVE-2020-1419 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1419 Common Vulnerability Exposure (CVE) ID: CVE-2020-1421 https://www.zerodayinitiative.com/advisories/ZDI-20-923/ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1421 Common Vulnerability Exposure (CVE) ID: CVE-2020-1427 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1427 Common Vulnerability Exposure (CVE) ID: CVE-2020-1428 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1428 Common Vulnerability Exposure (CVE) ID: CVE-2020-1430 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1430 Common Vulnerability Exposure (CVE) ID: CVE-2020-1432 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1432 Common Vulnerability Exposure (CVE) ID: CVE-2020-1435 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1435 Common Vulnerability Exposure (CVE) ID: CVE-2020-1436 https://www.zerodayinitiative.com/advisories/ZDI-20-877/ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1436 http://www.openwall.com/lists/oss-security/2020/08/25/5 http://www.openwall.com/lists/oss-security/2020/08/25/3 Common Vulnerability Exposure (CVE) ID: CVE-2020-1437 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1437 Common Vulnerability Exposure (CVE) ID: CVE-2020-1438 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1438 Common Vulnerability Exposure (CVE) ID: CVE-2020-1468 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1468
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.