what update that replaced the KB4489899 for Server 2019

Question

Hi

We have a security vendor who flagged these CVE's and that our Server 2019 is not Security compliant

CVE-2019-0726

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.

CVE-2019-0698

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0726.

CVE-2019-0697

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726.

And i can see that it links to a KB called KB4489899 but that is not available anymore and i can't find anything superseding it

We have installed all recommended updates on the servers but can’t find anything on what update that replaced the KB4489899 and that issue mentioned above here.

so what update replaced the KB4489899 update og fixed the issues ?

Answer 1

Hi, @Kasper Kjelfred Krogh

Thank you for posting in Microsoft Q&A forum.

The latest cumulative update for Windows Server 2019 is KB5032196, have you installed it?

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5032196%20

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Answer 2

Just got a reply from the vendor who can confirm that it is a false positive and they are looking in to why it is reporting the issue.