Microsoft Windows RRAS Buffer Over-Read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This vulnerability allows an unauthorized attacker to disclose information over the network by exploiting the buffer over-read condition.

Impact

Successful exploitation of this vulnerability could allow an attacker to read portions of heap memory, potentially leading to unauthorized information disclosure.

Remediation

Users can apply the security updates provided in the Microsoft Knowledge Base articles KB5055557, KB5055581, KB5055561, KB5055609, KB5055521, KB5055523, KB5055526, and KB5055519 to address this vulnerability.