Microsoft security update – Out-of-Band

Number: AV18-102
Date: 19 June 2018

Purpose

The purpose of this advisory is to bring attention to a recently released Microsoft Security Critical Update.

Assessment

This advisory contains software updates that address vulnerabilities in some elements of “Oracle Outside In” libraries that are contained within Microsoft Exchange Server.

Affected Products:

• Microsoft Exchange Server 2010 Service Pack 3
• Microsoft Exchange Server 2013
• Microsoft Exchange Server 2016

CVE References: CVE-2018-2768, CVE-2018-2806, CVE-2018-2801.

Suggested Action

CCIRC recommends that system administrators test and deploy the vendor-released updates to affected applications accordingly.

References:

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180010
• http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html