CVE-2019-1233: High severity microsoft exchange server vulnerability

Published Sep 11, 2019

Updated

A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.

Affected Software

4 affected components

Microsoft Exchange Server=2016-cumulative_update_12

Microsoft Exchange Server=2016-cumulative_update_13

Microsoft Exchange Server=2019-cumulative_update_1

Microsoft Exchange Server=2019-cumulative_update_2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1233

Event History

Sep 11, 2019

CVE Published

via MITRE·09:24 PM

Data Sourced

via MITRE·09:24 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-1233?

CVE-2019-1233 is classified as a denial of service vulnerability with a high severity rating.

How do I fix CVE-2019-1233?

To address CVE-2019-1233, apply the latest cumulative updates for Microsoft Exchange Server as recommended by Microsoft.

What versions of Microsoft Exchange Server are affected by CVE-2019-1233?

CVE-2019-1233 affects Microsoft Exchange Server 2016 (cumulative update 12 and 13) and Microsoft Exchange Server 2019 (cumulative update 1 and 2).

What are the potential impacts of CVE-2019-1233?

The potential impact of CVE-2019-1233 includes service disruption due to denial of service attacks targeting Exchange Server.

Is there a workaround for CVE-2019-1233?

There are no known workarounds for CVE-2019-1233, and applying the update is the recommended mitigation.