보안 권고문

MS 제품군 2024년 2월 정기 보안 업데이트 권고

개요

 

Microsoft (https://www.microsoft.com) 에서는 공급한 제품의 취약점을 해결하는 보안 업데이트를 발표하였습니다. 해당하는 제품 사용자는 최신 버전으로 업데이트하시기 바랍니다.

 

대상 제품

 

 

Azure 제품군

Azure Connected Machine Agent

Azure DevOps Server 2022.1

Azure File Sync v14.0

Azure File Sync v15.0

Azure File Sync v16.0

Azure File Sync v17.0

Azure Kubernetes Service Confidential Containers

Azure Site Recovery

Azure Stack Hub

Microsoft Azure Active Directory B2C

Microsoft Entra Jira Single-Sign-On Plugin

 

Developer Tools 제품군

.NET 6.0

.NET 7.0

.NET 8.0

ASP.NET Core 6.0

ASP.NET Core 7.0

ASP.NET Core 8.0

Azure DevOps Server 2019.1.2

Azure DevOps Server 2020.1.2

Microsoft Visual Studio 2022 version 17.4

Microsoft Visual Studio 2022 version 17.6

Microsoft Visual Studio 2022 version 17.8

 

ESU 제품군

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2012

Windows Server 2012 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2 (Server Core installation)

 

Exchange Server 제품군

Microsoft Exchange Server 2016 Cumulative Update 23

Microsoft Exchange Server 2019 Cumulative Update 13

Microsoft Exchange Server 2019 Cumulative Update 14

 

Microsoft Dynamics 제품군

Microsoft Dynamics 365 (on-premises) version 9.1

Microsoft Dynamics 365 Business Central 2022 Release Wave 2

Microsoft Dynamics 365 Business Central 2023 Release Wave 1

Microsoft Dynamics 365 Business Central 2023 Release Wave 2

Microsoft Dynamics 365 Customer Engagement V9.1

 

Microsoft Office 제품군

Microsoft 365 Apps for Enterprise for 32-bit Systems

Microsoft 365 Apps for Enterprise for 64-bit Systems

Microsoft Excel 2016 (32-bit edition)

Microsoft Excel 2016 (64-bit edition)

Microsoft Office 2016 (32-bit edition)

Microsoft Office 2016 (64-bit edition)

Microsoft Office 2019 for 32-bit editions

Microsoft Office 2019 for 64-bit editions

Microsoft Office LTSC 2021 for 32-bit editions

Microsoft Office LTSC 2021 for 64-bit editions

Microsoft Outlook 2016 (32-bit edition)

Microsoft Outlook 2016 (64-bit edition)

Microsoft PowerPoint 2016 (32-bit edition)

Microsoft PowerPoint 2016 (64-bit edition)

Microsoft Publisher 2016 (32-bit edition)

Microsoft Publisher 2016 (64-bit edition)

Microsoft Teams for Android

Microsoft Visio 2016 (32-bit edition)

Microsoft Visio 2016 (64-bit edition)

Microsoft Word 2016 (32-bit edition)

Microsoft Word 2016 (64-bit edition)

Skype for Business 2016 (32-bit)

Skype for Business 2016 (64-bit)

Skype for Business Server 2019 CU7

 

System Center 제품군

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1607 for 32-bit Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1607 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for 32-bit Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for 32-bit Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for 32-bit Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 10 for 32-bit Systems

Microsoft Defender for Endpoint for Windows on Windows 10 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 Version 22H2 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 Version 22H2 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 Version 23H2 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 Version 23H2 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for ARM64-based Systems

Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 for x64-based Systems

Microsoft Defender for Endpoint for Windows on Windows Server 2012

Microsoft Defender for Endpoint for Windows on Windows Server 2012 (Server Core installation)

Microsoft Defender for Endpoint for Windows on Windows Server 2012 R2

Microsoft Defender for Endpoint for Windows on Windows Server 2012 R2 (Server Core installation)

Microsoft Defender for Endpoint for Windows on Windows Server 2016

Microsoft Defender for Endpoint for Windows on Windows Server 2016 (Server Core installation)

Microsoft Defender for Endpoint for Windows on Windows Server 2019

Microsoft Defender for Endpoint for Windows on Windows Server 2019 (Server Core installation)

Microsoft Defender for Endpoint for Windows on Windows Server 2022

Microsoft Defender for Endpoint for Windows on Windows Server 2022 (Server Core installation)

Microsoft Defender for Endpoint for Windows on Windows Server 2022, 23H2 Edition (Server Core installation)

 

Windows 제품군

Windows 10 Version 1607 for 32-bit Systems

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 10 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows 11 Version 23H2 for ARM64-based Systems

Windows 11 Version 23H2 for x64-based Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

Windows Server 2016

Windows Server 2016 (Server Core installation)

Windows Server 2019

Windows Server 2019 (Server Core installation)

Windows Server 2022

Windows Server 2022 (Server Core installation)

Windows Server 2022, 23H2 Edition (Server Core installation)

 

해결된 취약점

 

긴급(Critical) 등급 5종, 중요(Important) 등급 66종의 취약점이 발견되었습니다.

 

Azure 제품군

Azure Active Directory에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21401)

Azure Active Directory에서 발생하는 중요 등급의 스푸핑 취약점 (CVE-2024-21381)

Azure Connected Machine Agent에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21329)

Azure DevOps에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-20667)

Azure File Sync에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21397)

Azure Site Recovery에서 발생하는 보통 등급의 권한 상승 취약점 (CVE-2024-21364)

Azure Stack에서 발생하는 중요 등급의 스푸핑 취약점 (CVE-2024-20679)

Microsoft Azure Kubernetes Service에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21403)

Microsoft Azure Kubernetes Service에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21376)

 

Developer Tools 제품군

.NET에서 발생하는 중요 등급의 서비스 거부 취약점 (CVE-2024-21386, CVE-2024-21404)

 

Exchange Server 제품군

Microsoft Exchange Server에서 발생하는 긴급 등급의 권한 상승 취약점 (CVE-2024-21410)

 

Microsoft Dynamics 제품군

Microsoft Dynamics에서 발생하는 긴급 등급의 정보 공개 취약점 (CVE-2024-21380)

Microsoft Dynamics에서 발생하는 중요 등급의 스푸핑 취약점 (CVE-2024-21327, CVE-2024-21389, CVE-2024-21393, CVE-2024-21394, CVE-2024-21396, CVE-2024-21328, CVE-2024-21395)

 

Microsoft Office 제품군

Microsoft Office OneNote에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21384)

Microsoft Office Outlook에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21402)

Microsoft Office Outlook에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21378)

Microsoft Office Word에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21379)

Microsoft Office에서 발생하는 긴급 등급의 원격 코드 실행 취약점 (CVE-2024-21413)

Microsoft Office에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-20673)

Microsoft Teams for Android에서 발생하는 중요 등급의 정보 공개 취약점 (CVE-2024-21374)

Skype for Business에서 발생하는 중요 등급의 정보 공개 취약점 (CVE-2024-20695)

 

System Center 제품군

Microsoft Defender for Endpoint에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21315)

 

Windows 제품군

Internet Shortcut Files에서 발생하는 중요 등급의 보안기능 우회 취약점 (CVE-2024-21412)

Microsoft ActiveX에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21349)

Microsoft WDAC ODBC Driver에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21353)

Microsoft WDAC OLE DB provider for SQL에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21360, CVE-2024-21361, CVE-2024-21366, CVE-2024-21369, CVE-2024-21375, CVE-2024-21420, CVE-2024-21359, CVE-2024-21365, CVE-2024-21367, CVE-2024-21368, CVE-2024-21370, CVE-2024-21391)

Microsoft Windows DNS에서 발생하는 중요 등급의 정보 공개 취약점 (CVE-2024-21377)

Microsoft Windows에서 발생하는 중요 등급의 스푸핑 취약점 (CVE-2024-21406)

Role: DNS Server에서 발생하는 중요 등급의 서비스 거부 취약점 (CVE-2023-50387, CVE-2024-21342)

SQL Server에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21347)

Trusted Compute Base에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21304)

Windows Hyper-V에서 발생하는 긴급 등급의 서비스 거부 취약점 (CVE-2024-20684)

Windows Internet Connection Sharing (ICS)에서 발생하는 긴급 등급의 원격 코드 실행 취약점 (CVE-2024-21357)

Windows Internet Connection Sharing (ICS)에서 발생하는 중요 등급의 서비스 거부 취약점 (CVE-2024-21343, CVE-2024-21344, CVE-2024-21348)

Windows Kernel에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21338, CVE-2024-21371, CVE-2024-21345)

Windows Kernel에서 발생하는 중요 등급의 보안기능 우회 취약점 (CVE-2024-21362)

Windows Kernel에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21341)

Windows Kernel에서 발생하는 중요 등급의 정보 공개 취약점 (CVE-2024-21340)

Windows LDAP – Lightweight Directory Access Protocol에서 발생하는 중요 등급의 서비스 거부 취약점 (CVE-2024-21356)

Windows Message Queuing에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21354, CVE-2024-21355, CVE-2024-21405)

Windows Message Queuing에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21363)

Windows OLE에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21372)

Windows SmartScreen에서 발생하는 보통 등급의 보안기능 우회 취약점 (CVE-2024-21351)

Windows USB Serial Driver에서 발생하는 중요 등급의 원격 코드 실행 취약점 (CVE-2024-21339)

Windows Win32K – ICOMP에서 발생하는 중요 등급의 권한 상승 취약점 (CVE-2024-21346)

 

취약점 패치

 

2024년 02월 13일 업데이트를 통해 제품별 취약점 패치가 다음과 같이 제공되었습니다. Windows Update 기능을 이용한 자동 설치 또는 아래 제품정보의 URL을 참고하여 다운로드 후 설치하십시오.

.NET 6.0 버전

https://dotnet.microsoft.com/download/dotnet/6.0

.NET 7.0 버전

https://dotnet.microsoft.com/en-us/download/dotnet/7.0

.NET 8.0 버전

https://dotnet.microsoft.com/en-us/download/dotnet/8.0

ASP.NET Core 6.0 버전

ASP.NET Core 7.0 버전

ASP.NET Core 8.0 버전

Azure Connected Machine Agent 버전

Azure DevOps Server 2019.1.2 버전

Azure DevOps Server 2020.1.2 버전

Azure DevOps Server 2022.1 버전

https://msrc.microsoft.com/update-guide/

Azure File Sync v14.0 버전

Azure File Sync v15.0 버전

Azure File Sync v16.0 버전

https://catalog.update.microsoft.com/Search.aspx?q=5023052

Azure File Sync v17.0 버전

https://catalog.update.microsoft.com/Search.aspx?q=5023054

Azure Kubernetes Service Confidential Containers 버전

https://msrc.microsoft.com/update-guide/

Azure Site Recovery 버전

https://learn.microsoft.com/en-us/azure/site-recovery/service-updates-how-to?source=recommendations

Azure Stack Hub 버전

https://msrc.microsoft.com/update-guide/

Microsoft 365 Apps for Enterprise 버전

https://msrc.microsoft.com/update-guide/

Microsoft Azure Active Directory B2C 버전

https://learn.microsoft.com/en-us/azure/active-directory-b2c/authorization-code-flow

Microsoft Defender for Endpoint for Windows on Windows 10 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032199

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1607 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032197

Microsoft Defender for Endpoint for Windows on Windows 10 Version 1809 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032196

Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 버전

Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032189

Microsoft Defender for Endpoint for Windows on Windows 11 Version 22H2 버전

Microsoft Defender for Endpoint for Windows on Windows 11 Version 23H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032190

Microsoft Defender for Endpoint for Windows on Windows 11 version 21H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032192

Microsoft Defender for Endpoint for Windows on Windows Server 2012 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034830

Microsoft Defender for Endpoint for Windows on Windows Server 2012 R2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034819

Microsoft Defender for Endpoint for Windows on Windows Server 2016 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032197

Microsoft Defender for Endpoint for Windows on Windows Server 2019 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032196

Microsoft Defender for Endpoint for Windows on Windows Server 2022 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032198

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032247

Microsoft Defender for Endpoint for Windows on Windows Server 2022, 23H2 Edition 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5032202

Microsoft Dynamics 365 (on-premises) version 9.1 버전

https://www.microsoft.com/download/details.aspx?familyid=c14f7c99-edb2-4a23-8a31-31dfe6c075dd

Microsoft Dynamics 365 Business Central 2022 Release Wave 2 버전

https://www.microsoft.com/en-us/download/details.aspx?id=105805

Microsoft Dynamics 365 Business Central 2023 Release Wave 1 버전

https://www.microsoft.com/en-us/download/details.aspx?id=105806

Microsoft Dynamics 365 Business Central 2023 Release Wave 2 버전

https://www.microsoft.com/en-us/download/details.aspx?id=105810

Microsoft Dynamics 365 Customer Engagement V9.1 버전

https://www.microsoft.com/download/details.aspx?familyid=c14f7c99-edb2-4a23-8a31-31dfe6c075dd

Microsoft Entra Jira Single-Sign-On Plugin 버전

https://msrc.microsoft.com/update-guide/

Microsoft Excel 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=ae195ecc-c97f-40b3-b5c8-84532c0b9fde

Microsoft Exchange Server 2019 Cumulative Update 13 버전

Microsoft Exchange Server 2019 Cumulative Update 14 버전

https://www.microsoft.com/download/details.aspx?familyID=9fbd842e-828a-408a-b562-5632a8a827ab

Microsoft Office 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=3f798cca-1d11-494e-82a5-f8e8cbe4d716

https://www.microsoft.com/download/details.aspx?familyid=0019c7f4-e4f2-4741-8cfb-0fd2311b71f4

https://www.microsoft.com/download/details.aspx?familyid=eced3839-7e06-43be-a013-ff34c4a3e4a7

https://www.microsoft.com/download/details.aspx?familyid=f6e4a256-d7fb-4ad0-a998-d3cdd5ea4bd8

https://www.microsoft.com/download/details.aspx?familyid=8315c33e-7682-4031-a323-f8c01c53dac1

Microsoft Office 2019 버전

Microsoft Office LTSC 2021 버전

https://msrc.microsoft.com/update-guide/

Microsoft Outlook 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=3612a0d1-032c-4c0e-8a8a-eb5ff91d8e31

Microsoft PowerPoint 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=eda04ab0-b2ef-498c-953c-a2c506c194a6

Microsoft Publisher 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=bfc358f2-ea3b-456a-aea9-8e4028a579fb

Microsoft Teams for Android 버전

https://msrc.microsoft.com/update-guide/

Microsoft Visio 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=1b56f25c-c5c4-4d77-9022-a4df85dbc532

Microsoft Visual Studio 2022 version 17.4 버전

Microsoft Visual Studio 2022 version 17.6 버전

Microsoft Visual Studio 2022 version 17.8 버전

https://msrc.microsoft.com/update-guide/

Microsoft Word 2016 버전

https://www.microsoft.com/download/details.aspx?familyid=adbbc6b3-6fc1-42c7-b782-18539f2e89dd

Skype for Business 2016 (32-bit) 버전

Skype for Business 2016 (64-bit) 버전

https://www.microsoft.com/download/details.aspx?familyid=63f19bfc-cbbb-415b-83da-53e2e170c61f

Windows 10 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034774

Windows 10 Version 1607 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034767

Windows 10 Version 1809 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034768

Windows 10 Version 21H2 버전

Windows 10 Version 22H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034763

Windows 11 Version 22H2 버전

Windows 11 Version 23H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034765

Windows 11 version 21H2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034766

Windows Server 2008 R2 Service Pack 1 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034831

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034809

Windows Server 2008 Service Pack 2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034795

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034833

Windows Server 2012 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034830

Windows Server 2012 R2 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034819

Windows Server 2016 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034767

Windows Server 2019 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034768

Windows Server 2022 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034770

Windows Server 2022, 23H2 Edition 버전

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5034769