CVE-2021-34499: Windows DNS Server Denial of Service Vulnerability
Windows DNS Server Denial of Service Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2061Patch KB5004244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.4530Patch KB5004238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.21167Patch KB5004299 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20069Patch KB5004285 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.25661Patch KB5004307 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23409Patch KB5004302
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34499?
CVE-2021-34499 has a severity rating of Important as it can lead to a denial of service on affected Windows DNS servers.
Which versions of Windows are affected by CVE-2021-34499?
CVE-2021-34499 affects multiple versions of Windows Server, including 2008, 2012, 2016, and 2019.
How do I fix CVE-2021-34499?
To fix CVE-2021-34499, you should apply the latest security patches provided by Microsoft for your affected Windows Server version.
What type of attack does CVE-2021-34499 enable?
CVE-2021-34499 enables a denial of service attack that can disrupt DNS services on vulnerable Windows servers.
Is there a workaround for CVE-2021-34499?
Currently, the only recommended mitigation for CVE-2021-34499 is to apply the appropriate security updates from Microsoft.