CVE-2024-38044
EUVD-2024-3774209.07.2024, 17:15
DHCP Server Service Remote Code Execution VulnerabilityEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_server_2012 | - |
| microsoft | windows_server_2016 | 𝑥 < 10.0.14393.7159 |
| microsoft | windows_server_2019 | 𝑥 < 10.0.17763.6054 |
| microsoft | windows_server_2022 | 𝑥 < 10.0.20348.2582 |
| microsoft | windows_server_2022_23h2 | 𝑥 < 10.0.25398.1009 |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||
|---|---|---|---|---|---|---|---|
| Windows Server 2008 |
| ||||||
| Windows Server 2008 R2 |
| ||||||
| Windows Server 2012 |
| ||||||
| Windows Server 2012 R2 |
| ||||||
| Windows Server 2016 |
| ||||||
| Windows Server 2019 |
| ||||||
| Windows Server 2022 |
|
Common Weakness Enumeration
- CWE-197 - Numeric Truncation ErrorTruncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
- CWE-681 - Incorrect Conversion between Numeric TypesWhen converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.