Steps to install CVE-2021-42287 and CVE-2021-4227

Question

Hello,

I'm tasked with installing CVE-2021-42287 and CVE-2021-4227 on a few domain controllers. I can't seem to find the proper steps to do this.

Server Details:
DC1
Windows Server 2012 R2 Standard
Last Update:
KB2934520 | 10/12/2020

DC2
Windows Server 2016 Datacenter
Last Update:
KB5008207 | 12/21/2021

Can anyone furnish step by step details?

Thanks in advance.

Regards,
Rudy

Answer 1

Nothing special really. Install the latest SSU
(2016)
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5005698

followed by the latest cumulative update.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5008207

(2012 R2)
SSU
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5001403
latest cumulative update
https://www.catalog.update.microsoft.com/Search.aspx?q=KB5008263

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hello @Rudolf Amarlapudi

For 2016:
CVE-2021-42287 and CVE-2021-4227
https://support.microsoft.com/en-us/topic/november-9-2021-kb5007192-os-build-14393-4770-f534a33a-ed00-4bd2-8248-9424c53e9bde

For 2012R2
CVE-2021-42287
https://support.microsoft.com/en-us/topic/november-9-2021-kb5007247-monthly-rollup-2c3b6017-82f4-4102-b1e2-36f366bf3520
https://support.microsoft.com/en-us/topic/november-9-2021-kb5007255-security-only-update-10532701-72af-4061-a138-a5f85685eef9
-Windows Server 2012R2 is not affected by CVE-2021-4227 as you can see here: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42277

Hope this helps with your query,

-----------

--If the reply is helpful, please Upvote and Accept as answer--