CVE-2023-28305: Windows DNS Server Remote Code Execution Vulnerability
Published Apr 11, 2023
·Updated
Windows DNS Server Remote Code Execution Vulnerability
Affected Software
23 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Remediation
Event History
Apr 11, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-28305?
CVE-2023-28305 is a vulnerability in Windows DNS Server that allows remote code execution.
2
How severe is CVE-2023-28305?
CVE-2023-28305 has a severity level of high.
3
Which versions of Windows Server are affected by CVE-2023-28305?
Windows Server 2012 R2, Windows Server 2008 R2, Windows Server 2012, Windows Server 2022, Windows Server 2019, and Windows Server 2016 are affected by CVE-2023-28305.
4
How can I fix CVE-2023-28305?
You can fix CVE-2023-28305 by applying the relevant patches provided by Microsoft or by following the remediation steps outlined in the official Microsoft support documents.
5
Where can I find more information about CVE-2023-28305?
You can find more information about CVE-2023-28305 in the official Microsoft Security Response Center (MSRC) update guide for this vulnerability.