高危保安警报 (A20-10-01): Microsoft 产品多个漏洞 (2020年10月)

描述:

Microsoft 发布了安全性更新以应对多个影响 Microsoft 产品或元件的多个漏洞。有关安全性更新的列表，请参考以下网址：

https://support.microsoft.com/en-us/help/20201013/security-update-deployment-information-october-13-2020

针对 Microsoft 的 Windows IPv6 堆叠中的远端执行程式码漏洞（CVE-2020-16898）的概念验证已被观察到。该漏洞影响 Windows 10、Windows Server 2019 及 Windows Server 1903 版本、1909 版本 及 2004 版本。系统管理员应立即为受影响的系统安装修补程式，以减低受到网络攻击的风险。

受影响的系统:

• Microsoft Windows 7, 8.1, RT 8.1, 10
• Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019
• Microsoft Windows Server, version 1903, version 1909, version 2004
• Microsoft Office 2010, 2013, 2013 RT, 2016, 2016 for Mac, 2019, 2019 for Mac
• Microsoft Office Online Server
• Microsoft Office Web Apps 2010, 2013
• Microsoft Excel 2010, 2013, 2013 RT, 2016
• Microsoft Excel Web App 2010
• Microsoft Word 2010, 2013, 2013 RT, 2016
• Microsoft Exchange Server 2013, 2016, 2019
• Microsoft Outlook 2010, 2013, 2013 RT, 2016
• Microsoft Dynamics 365 (on-premises) version 8.2, 9.0
• Microsoft SharePoint Foundation 2010, 2013
• Microsoft SharePoint Enterprise Server 2013, 2016
• Microsoft SharePoint Server 2010, 2019
• Microsoft 365 Apps for Enterprise
• Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8
• 3D Viewer
• Azure Functions
• Dynamics 365 Commerce
• Network Watcher Agent virtual machine extension for Linux
• PowerShellGet 2.2.5
• Visual Studio Code

影响:

成功利用这些漏洞可以导致远端执行程式码、提高权限、服务受阻断、泄漏资讯、绕过保安功能及仿冒诈骗，视乎攻击者利用哪个漏洞而定。

建议:

受影响产品的修补程式可在 Windows Update 或 Microsoft Update Catalog 获取。受影响系统的用户应遵从产品供应商的建议，立即采取行动以降低风险。

进一步信息:

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2020-Oct
https://www.hkcert.org/my_url/zh/alert/20101401
https://us-cert.cisa.gov/ncas/current-activity/2020/10/13/microsoft-releases-october-2020-security-updates
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200012
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0764
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1047
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1080
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1167
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1243
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16863
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16876
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16877
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16885 (to CVE-2020-16887)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16889 (to CVE-2020-16892)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16894 (to CVE-2020-16902)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16904
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16905
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16907 (to CVE-2020-16916)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16918 (to CVE-2020-16924)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16927 (to CVE-2020-16957)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16967 (to CVE-2020-16969)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16972 (to CVE-2020-16978)
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16980
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16995
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17003