No Zero-Days but PGM Flaws Cause Patch Tuesday Concern

Procedure directors breathed a sigh of relief yesterday soon after Microsoft issued a rather gentle patch update spherical, with no zero-day vulnerabilities and only six critical CVEs on the list.

However, there was however some operate to do. Among the the 78 CVEs resolved was a critical SharePoint elevation of privilege bug (CVE-2023-29357), which Adam Barnett, direct software engineer at Quick7, claimed companies ought to prioritize.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

“Microsoft isn’t conscious of public disclosure or in-the-wild exploitation, but considers exploitation additional possible,” he included.

“At time of writing, the FAQ provided with Microsoft’s advisory implies that both equally SharePoint Organization Server 2016 and SharePoint Server 2019 are vulnerable, but neither the advisory nor the SharePoint 2016 Launch history listing any associated patches for SharePoint 2016. Defenders liable for SharePoint 2016 will no question wish to abide by up on this one as a make any difference of some urgency.”

There may perhaps also be a lot more than 1 patch shown for a unique SharePoint version. If so, all of them should be put in to remediate the flaw, Barnett said.

Study much more on Patch Tuesday: Microsoft Fixes Zero-Working day Bug This Patch Tuesday.

In other places, there have been a few critical remote code execution (RCE) vulnerabilities shown for Windows Pragmatic Typical Multicast (PGM) – the third Patch Tuesday in a row to characteristic at the very least one critical RCE bug in PGM. These are CVE-2023-32015, CVE-2023-32014, and CVE-2023-29363.

Mike Walters, VP of vulnerability and risk analysis at Motion1, described that the Windows PGM protocol is usually utilized in online video streaming and on the net gaming applications.

“These vulnerabilities have a large CVSS ranking of 9.8 and pose a really serious risk. They can be exploited around the network without requiring privileges or person interaction. Afflicted techniques consist of all variations of Windows Server 2008 and later, as nicely as Windows 10 and later,” he warned.

“If the Windows Information Queuing Provider is running in a PGM Server atmosphere, an attacker could ship a specially crafted file to achieve remote code execution. To mitigate this vulnerability, think about examining if the Concept Queuing service is managing on TCP port 1801 and disable it if not needed. However, be careful as this could affect system features.”

Editorial image credit history: monticello / Shutterstock.com