locked
Ransomware patches RRS feed

  • Question

  •  am missing the following patches on some of my 2008 R2 servers (KB4012204 and KB4012212) from March related to the Ransomware vulnerabilities. I patch the servers every month and my customer is worried that the vulnerabilities still exists. The way I understand it is that subsequent roll-ups have superseded these patches. I just need something official stating this. 
    • Edited by armourworx Friday, June 16, 2017 1:11 AM
    Friday, June 16, 2017 1:10 AM

Answers

All replies

  • Check the Package Details tab here.

    http://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=44b0c526-edde-46e9-b82d-d89ca970102d

    You can download KB4012212 here.

    http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012212

    Also note updates are now cumulative. 

    https://support.microsoft.com/en-us/help/4009469/windows-7-sp1-windows-server-2008-r2-sp1-update-history

     

     

     



    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Friday, June 16, 2017 3:27 AM
  • Hi,

    KB4012204 is applied to Windows Server 2012. 

    Microsoft Security Bulletin MS17-010 includes several KBs, each OS version has its own KB number. KB 4012212 (Security Only) and KB 4012215(Monthly Rollup) are applied to Windows Server 2008 R2(with SP1 installed).

    Ransomware WannaCry attacks SMBv1. Server Message Block 1.0 (SMBv1) vulnerabilities has been resolved using Microsoft Security Bulletin MS17-010. 

    So, for Windows Server 2008 R2, install either KB 4012212 or KB 4012215 is helpful for preventing attacked by Ransomware WannaCry.

    For Monthly Rollup update, such as KB 4012215, it will be replace by next month rollup, newly released month rollup fixes more and still helpful for preventing attacked by Ransomware WannaCry.

    Until now, KB 4012215 replace sequence:
    March, 2017 Security monthly rollup KB 4012215 has been replaced by KB 40515549
    April, 2017 Security monthly rollup KB 40515549 has been replaced by KB 4019264
    May, 2017 Security monthly rollup KB 4019264 has been replace by KB 4022719

    Best Regards,
    Eve Wang

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 16, 2017 7:17 AM
  • Hi,

    I am checking to see how things are going there on this issue. Please let me know if you would like further assistance.

    You can click “Mark as answer” if the reply is helpful. It would make this reply to the top and easier to be found for other people who has the similar problem.

    Best Regards,
    Eve Wang

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, June 22, 2017 2:39 AM