CVE-2023-28308: Windows DNS Server Remote Code Execution Vulnerability
Published Apr 11, 2023
·Updated
Windows DNS Server Remote Code Execution Vulnerability
Affected Software
23 affected componentsFixes available
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2016
Microsoft Windows Server 2012
Microsoft Windows Server 2012
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2008
Microsoft Windows Server 2019
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2022
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2
Remediation
Event History
Apr 11, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:14 PM
Data Sourced
via MITRE·07:14 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-28308?
CVE-2023-28308 has a critical severity rating owing to its potential for remote code execution.
2
How do I fix CVE-2023-28308?
To fix CVE-2023-28308, apply the appropriate patches available for your Microsoft Windows Server version.
3
Which Windows Server versions are affected by CVE-2023-28308?
CVE-2023-28308 affects various versions of Windows Server including 2008 R2, 2012, 2016, 2019, and 2022.
4
What type of vulnerability is CVE-2023-28308?
CVE-2023-28308 is classified as a remote code execution vulnerability specifically affecting Windows DNS Server.
5
Are there any workarounds for CVE-2023-28308?
While applying patches is the recommended solution, temporary workarounds may include disabling DNS services or restricting access.