CVE-2021-33745 - Windows DNS Server Denial of Service Vulnerability

Back Back to CVE browser

MEDIUM

Windows DNS Server Denial of Service Vulnerability

Published Jul 14, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 2.87%

Description

Windows DNS Server Denial of Service Vulnerability

Affected products

Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.25661
Vendor Microsoft Product Windows Server 2008 R2 Service Pack 1 (Server Core installation) Default
unknown
Affected
- ≥ 6.1.7601.0, < 6.1.7601.25661
Vendor Microsoft Product Windows Server 2008 Service Pack 2 Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.21167
Vendor Microsoft Product Windows Server 2008 Service Pack 2 (Server Core installation) Default
unknown
Affected
- ≥ 6.0.6003.0, < 6.0.6003.21167
Vendor Microsoft Product Windows Server 2012 Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.23409
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.23409
Vendor Microsoft Product Windows Server 2012 R2 Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.20069
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.20069
Vendor Microsoft Product Windows Server 2016 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.4530
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.4530
Vendor Microsoft Product Windows Server 2019 Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.2061
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.2061
Vendor Microsoft Product Windows Server version 2004 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19041.1110
Vendor Microsoft Product Windows Server version 20H2 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.19042.1110

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows Server 2008 R2 Service Pack 1	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.25661
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	unknown	Affected ≥ 6.1.7601.0, < 6.1.7601.25661
Microsoft	Windows Server 2008 Service Pack 2	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.21167
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	unknown	Affected ≥ 6.0.6003.0, < 6.0.6003.21167
Microsoft	Windows Server 2012	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.23409
Microsoft	Windows Server 2012 (Server Core installation)	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.23409
Microsoft	Windows Server 2012 R2	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.20069
Microsoft	Windows Server 2012 R2 (Server Core installation)	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.20069
Microsoft	Windows Server 2016	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.4530
Microsoft	Windows Server 2016 (Server Core installation)	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.4530
Microsoft	Windows Server 2019	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.2061
Microsoft	Windows Server 2019 (Server Core installation)	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.2061
Microsoft	Windows Server version 2004	unknown	Affected ≥ 10.0.0, < 10.0.19041.1110
Microsoft	Windows Server version 20H2	unknown	Affected ≥ 10.0.0, < 10.0.19042.1110

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20422
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33745
vendor-advisorypatch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33745
PatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-20422		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33745		vendor-advisorypatch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33745		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 14, 2021

Updated Aug 10, 2026

Reserved May 28, 2021

Link CVE-2021-33745

CISA Vulnrichment

No data

NVD

Status Modified

Modified Aug 10, 2026

Link CVE-2021-33745

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jul 14, 2021

Updated Aug 10, 2026

Link EUVD-2021-20422

GitHub

No data