CVE-2024-43639

The vulnerability affects the KDC Proxy service (Kerberos Key Distribution Center Proxy), which mediates Kerberos communication over the network. An attacker can remotely, without any authentication and user interaction, send a specially crafted request to the KDC Proxy service, leading to arbitrary code execution on the vulnerable server. The network attack vector with low attack complexity indicates that exploiting this vulnerability is relatively simple.

An attacker can gain full control over the vulnerable system — steal confidential data, modify files, and disrupt service operations (violation of confidentiality, integrity, and availability).

Security updates released by Microsoft as part of November 2024 Patch Tuesday should be applied immediately, in accordance with references available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43639. As a temporary measure, consider restricting network access to the KDC Proxy service to trusted hosts only.

Microsoft Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022 — detailed information about affected versions available in vendor references.