CVE:CVE-2022-21884
CNNVD:CNNVD-202201-801
Microsoft Windows Local Security Authority Subsystem Service是美国微软（Microsoft）公司的一个内部程序，负责运行Windows系统安全政策。它在用户登录时电脑单机或服务器时，验证用户身份，管理用户密码变更，并产生访问字符。它也会在窗口安全日志中留下应有的记录。
Microsoft Windows Local Security Authority Subsystem Service存在缓冲区错误漏洞。以下产品和版本受到影响：Windows Server 2019,Windows Server 2019  (Server Core installation),Windows Server, version 20H2 (Server Core Installation),Windows Server 2016,Windows Server 2016  (Server Core installation),Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2,Windows Server 2012 R2 (Server Core installation),Windows Server 2022,Windows Server 2022 (Server Core installation)
solution:Upgrade microsoft windows_server to a higher version than 20h2,2022,and avoid the version 20h2,2022; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -; Upgrade microsoft windows_server_2019 to a higher version than -