QID 91942

Date Published: 2022-09-14

QID 91942: Microsoft Windows Domain Name System (DNS) Server Denial of Service (DoS) Vulnerability for September 2022

Microsoft Windows Security Update - September 2022 The KB Articles associated with the update:
5017367
5017365
5017370
5017377
5017361
5017373
5017358
5017371
5017305
5017316
5017315

QID Detection Logic (Authenticated):

This QID checks for the file version of dns.exe

Successful exploitation of the vulnerability may result in Denial Of Service.

  • CVSS V3 rated as High - 7.5 severity.
  • CVSS V2 rated as High - 7.8 severity.
  • Solution
    Vendor has released patch. Please refer to CVE-2022-34724 for more information.

    CVEs related to QID 91942

    Software Advisories
    Advisory ID Software Component Link
    KB5017305 URL Logo support.microsoft.com/help/5017305
    KB5017315 URL Logo support.microsoft.com/help/5017315
    KB5017316 URL Logo support.microsoft.com/help/5017316
    KB5017358 URL Logo support.microsoft.com/help/5017358
    KB5017361 URL Logo support.microsoft.com/help/5017361
    KB5017365 URL Logo support.microsoft.com/help/5017365
    KB5017367 URL Logo support.microsoft.com/help/5017367
    KB5017370 URL Logo support.microsoft.com/help/5017370
    KB5017371 URL Logo support.microsoft.com/help/5017371
    KB5017373 URL Logo support.microsoft.com/help/5017373
    KB5017377 URL Logo support.microsoft.com/help/5017377
    © CVE.report 2026 |

    Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

    CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

    Free CVE JSON API cve.report/api

    CVE.report and Source URL Uptime Status status.cve.report