Micropatches Released For Denial of Service in Microsoft Message Queuing (CVE-2023-28302, CVE-2023-21769)

 

 

April 2023 Windows Updates brought fixes for a number of vulnerabilities in Microsoft Message Queuing
Service. We first issued patches for the "Queuejumper" remote code execution vulnerability (CVE-2023-21554) as its POC became available. Subsequently, we got access to POCs for two additional issues in Microsoft Message Queuing
Service: CVE-2023-21769 and CVE-2023-28302, both being remote denial-of-service issues.

While
still-supported Windows systems have already received the official
vendor fix for these vulnerabilities, there are Windows systems out there
that …

access april code code execution cve cve-2023-21554 denial of service fixes message microsoft patches poc pocs remote code remote code execution service updates vulnerabilities vulnerability windows windows updates