freebuf微软4月补丁日多个高危安全漏洞
4月13日，微软官方发布了本月的安全更新通告，对多个产品中的安全漏洞进行了修复：
https://msrc.microsoft.com/update-guide/releaseNote/2022-Apr
其中值得重点关注的可远程利用的服务端漏洞主要包括CVE-2022-26809 Remote Procedure Call Runtime 远程代码执行漏洞，CVE-2022-24491、CVE-2022-24497 Windows Network File System 远程代码执行漏洞。
漏洞描述
CVE-2022-26809 Remote Procedure Call Runtime 远程代码执行漏洞
Remote Procedure Call Runtime 存在远程代码执行漏洞，攻击者可通过构造恶意的 RPC 请求来利用此漏洞。此漏洞的利用无需用户交互，也无需授权，可通过 445 端口被攻击者远程利用，因此被认为是可蠕虫的漏洞。目前此漏洞尚未有公开的细节和利用脚本。
CVE-2022-24491、CVE-2022-24497 Windows Network File System 远程代码执行漏洞
CVE-2022-24491 和 CVE-2022-24497 都是存在于 Windows Network File System 中的远程代码执行漏洞，远程且未经过授权的攻击者可通过发送恶意的 NFS 协议数据包来进行漏洞利用。这两个漏洞只影响启用了 NFS 角色的 Windows 系统，且目前尚未有公开的细节和利用脚本。
影响范围
CVE 影响系统范围 CVE-2022-26809 Remote Procedure Call Runtime 远程代码执行漏洞 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for 32-bit Systems Service Pack 1 Windows Server 2016 (Server Core installation) Windows 11 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 1809 for 32-bit Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows 10 Version 21H1 for 32-bit Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for x64-based Systems Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2012 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for x64-based Systems Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for 32-bit systems Windows 7 for x64-based Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows RT 8.1 Windows 8.1 for x64-based systems Windows 8.1 for x64-based systems Windows 11 for x64-based Systems Windows Server 2019 (Server Core installation) Windows Server 2019 CVE-2022-24491、CVE-2022-24497 Windows Network File System 远程代码执行漏洞 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2012 Windows RT 8.1 Windows 8.1 for x64-based systems Windows 8.1 for x64-based systems Windows 8.1 for 32-bit systems Windows 8.1 for 32-bit systems Windows Server 2016 (Server Core installation) Windows Server 2016 Windows 10 Version 1607 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 11 for ARM64-based Systems Windows 11 for x64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for x64-based Systems Windows Server 2022 (Server Core installation) Windows Server 2022 Windows 10 Version 21H1 for 32-bit Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows Server 2019 (Server Core installation) Windows Server 2019 Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for 32-bit Systems |
解决方案
微软官方已发布相应的补丁修复漏洞，Windows 系统用户可通过默认开启的安全更新检查进行漏洞修复更新，也可以访问以下链接手动安装相关的漏洞补丁：
https://msrc.microsoft.com/update-guide/releaseNote/2022-Apr
转载请注明来自网盾网络安全培训，本文标题：《微软4月补丁日多个高危安全漏洞》
标签：高危安全漏洞
