CNVD-2024-04950 | Vulnetix

CNVD-2024-04950 PUBLISHED CVSS 6.5 MEDIUM

Record from circl · Published January 9, 2024

Microsoft Message Queuing是用于实现需要高性能的异步和同步场景的解决方案。 Microsoft Message Queuing存在信息泄露漏洞，攻击者可利用该漏洞从堆内存中获取敏感信息。

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
Windows 11 version 21H2	Microsoft	10.0.22000.2713

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Vendor	Product	Versions
Microsoft	Windows 11 version 21H2	10.0.0
microsoft	windows_server_2016	10.0.14393.0
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0
Microsoft	Windows 10 Version 21H2	10.0.19043.0
Microsoft	Windows Server 2008 R2 Service Pack 1	6.1.7601.0
microsoft	windows_10_1809	10.0.17763.0, 10.0.0
microsoft	windows_server_2019	10.0.17763.0
microsoft	windows_10_22H2	10.0.19045.0
Microsoft	Windows 10 Version 1809	10.0.0, 10.0.17763.0
microsoft	windows_server_2022	10.0.20348.0
Microsoft	Windows Server 2022	10.0.20348.0
microsoft	windows_10_1607	10.0.14393.0
microsoft	windows_10_1507	10.0.10240.0
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0
Microsoft	Windows 11 version 22H2	10.0.22621.0
microsoft	windows_server_2008_sp2	6.0.6003.0
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0
Microsoft	Windows Server 2008 Service Pack 2	6.0.6003.0
Microsoft	Windows 11 Version 23H2	10.0.22631.0
Microsoft	Windows Server 2012	6.2.9200.0

…and 20 more

The same record, from the CLI:

vulnetix vdb vuln CNVD-2024-04950
vulnetix vdb fixes CNVD-2024-04950

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CNVD-2024-04950/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart