Title

Microsoft Service Bus Denial of Service Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Service Bus for Windows Server. To exploit this vulnerability, an attacker would creating and run a program that sends a sequence of specially crafted AMQP messages to the target system. If successfully exploited, the attacker would cause Microsoft Service Bus to stop responding to incoming messages and cause a denial of service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-52953

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.