关于2008系统补丁不适用

Question

系统版本：Windows Server 2008 R2 Enterprise

系统类型：64位(激活状态)

处理器：Montage Jintide（R）C12301 2.29GHz

该主机存在 【Microsoft Windows HTTP.sys远程代码执行漏洞(MS15-034)(CVE-2015-1635)】漏洞，http://technet.microsoft.com/security/bulletin/MS15-034 这是该漏洞的补丁地址，但关于 2008 系统的补丁都显示 “此更新不适用于您的系统”，我想知道为什么补丁不上，怎样才能修复这个漏洞。

Answer 1

Hi @g T

据您描述，您要安装的补丁是否为KB3042553？

KB3042553是2015年的补丁，它已经被后续安装的补丁所替代，而后续的补丁包含对此补丁修复升级。大概率是您已经安装了后续的补丁，所以会出现提示：此更新不适用于您的系统。

Hope the information is helpful.

Best Regards,

Hania Lian

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hello g T,

Thank you for your question and for reaching out with your question today.

The reason you are seeing the message "This update is not applicable to your system" when trying to install the patch for the Microsoft Windows HTTP.sys Remote Code Execution Vulnerability (MS15-034) on your Windows Server 2008 R2 system is likely due to one of the following reasons:

1. Mismatched Patch Version: The patch you are trying to install might be for a different version or edition of Windows Server 2008 R2. Ensure that you are downloading and installing the correct patch that matches your specific system version.
2. Incorrect Architecture: Verify that you are trying to install the correct architecture of the patch (32-bit or 64-bit) that matches your system's architecture. Since your system type is 64-bit, make sure you are downloading and installing the 64-bit version of the patch.
3. Already Installed: Windows Update might have already installed the necessary security update to address the MS15-034 vulnerability. Check your Windows Update history to see if the patch is already installed on your system.
4. Unsupported Edition: Some updates, including security updates, may not be applicable to certain editions of Windows Server 2008 R2, such as the Enterprise edition. Ensure that the patch you are trying to install is supported on the Enterprise edition.
5. Service Pack Requirement: The patch might have a prerequisite service pack requirement. Verify that your system has the required service pack installed before attempting to install the patch.
6. Update Rollup Requirement: In some cases, certain updates require specific update rollups to be installed first. Check if any update rollups are required before applying the security patch.

If you have confirmed that you are downloading the correct patch for your system and are still encountering issues, you may need to review the Microsoft Knowledge Base article associated with the patch or contact Microsoft Support for further assistance.

However, it is important to note that Windows Server 2008 R2 reached the end of its support lifecycle on January 14, 2020. This means that Microsoft is no longer providing regular security updates for this version of Windows, making it vulnerable to various security threats. It is highly recommended to upgrade to a newer, supported version of Windows Server to ensure you have access to the latest security patches and updates. Windows Server 2019 or newer versions would be more secure and receive ongoing support from Microsoft.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

If the reply was helpful, please don’t forget to upvote or accept as answer.

Best regards.