First published: Wed Sep 11 2019(Updated: )
A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Exchange Server | =2016-cumulative_update_12 | |
Microsoft Exchange Server | =2016-cumulative_update_13 | |
Microsoft Exchange Server | =2019-cumulative_update_1 | |
Microsoft Exchange Server | =2019-cumulative_update_2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1233 is classified as a denial of service vulnerability with a high severity rating.
To address CVE-2019-1233, apply the latest cumulative updates for Microsoft Exchange Server as recommended by Microsoft.
CVE-2019-1233 affects Microsoft Exchange Server 2016 (cumulative update 12 and 13) and Microsoft Exchange Server 2019 (cumulative update 1 and 2).
The potential impact of CVE-2019-1233 includes service disruption due to denial of service attacks targeting Exchange Server.
There are no known workarounds for CVE-2019-1233, and applying the update is the recommended mitigation.