0patch publishes micro-patch for legacy Windows Server OS to protect from critical DNS RCE vulnerability. The significance of this micro-patch release is that legacy Windows Server OSes may not have official support from vendors anymore and can be vulnerable to existing exploits. This provides a solution for administrators of these legacy systems to patch without having to perform an OS upgrade or reinstallation.
Runtime patch protects unsupported Windows Server DNS service from remote code execution
This patch focuses on the DNS service on legacy Windows Server OSes. It solves the remote code execution vulnerability that enables arbitrary code execution on the affected system. 0patch offers the micro-patch solution via their micro-patching agent that intercepts the vulnerable code paths at runtime. This approach is useful as it does not require traditional system patches which are not available anymore from Microsoft.
The vulnerable component is the DNS service on legacy Windows Server OSes. The remote code execution vulnerability enables unauthorized code execution via a specific DNS request handling within the service. The micro-patch changes the memory behavior of the vulnerable function. There is no need to reboot the system or change the system binaries.
This is relevant for Windows Server OSes which are out of support. Systems running these legacy OSes typically have higher security risks as they may not have official updates. This micro-patch offers a temporary solution to protect from existing exploits that can exploit the specific vulnerability. It enables IT teams to keep security at bay while they are planning a long-term solution on the migration.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.