Microsoft Windows RRAS Buffer Over-Read Vulnerability Allowing Information Disclosure

A buffer over-read vulnerability has been identified in the Windows Routing and Remote Access Service (RRAS). This vulnerability allows an unauthorized attacker to disclose information over the network by exploiting the buffer over-read condition, which could potentially lead to reading portions of heap memory.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure over the network.

Remediation

Users can apply the security updates provided in the Microsoft Knowledge Base articles KB5055519, KB5055521, KB5055523, KB5055526, KB5055527, KB5055561, KB5055570, KB5055581, and KB5055609. These security updates are available through the Microsoft Update Catalog.