MS14-042: Vulnerability in Microsoft service bus could allow denial of service: July 8, 2014

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows Server 2012 R2 Standard Windows Server 2012 Datacenter Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Standard Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Standard Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Datacenter

INTRODUCTION

Microsoft has released security bulletin MS14-042. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

For more information about the non-security fixes that are included in this update, click the following article number to go to the article in the Microsoft Knowledge Base:

2979588 Cumulative Update for Service Bus Server 1.1

How to obtain this security update

The following file is available for download from the Microsoft Download Center.

Download Download the package now.
Release Date: July 8, 2014

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online servicesMicrosoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Known issues that affect this security update

  • After you install this security update, you will see two entries in the Add/Remove Programs or the Programs and Features item in Control Panel listed under Service Bus 1.1:

    • Update for Microsoft Service Bus 1.1 (See KB article 2972621)
    • Security Update for Service Bus 1.1 (KB2972621) LDR

    To uninstall this update, you should remove only the “Security Update for Service Bus 1.1 (KB2972621)" entry.

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

File name File version File size Date Time Platform
Microsoft.Cloud.Servicebus.Client.dll 2.1.40512.2 2,973,184 12-Jun-2014 17:20 Not Applicable
Microsoft.Cloud.Servicebus.Messaging.dll 2.0.40512.2 659,456 12-Jun-2014 17:20 Not Applicable
Microsoft.ServiceBus.dll 2.1.40512.2 2,975,744 12-Jun-2014 17:20 Not Applicable
CreateMessagingHostClusterSchema.sql Not Applicable 17,318 12-Jun-2014 17:20 Not Applicable
CreateSqlMessagingStoreSchema.sql Not Applicable 45,581 12-Jun-2014 17:20 Not Applicable
Microsoft.ServiceBus.Commands.dll 2.0.40512.2 414,720 12-Jun-2014 17:20 Not Applicable
File hash information
File name SHA1 hash SHA256 hash
microsoft.cloud.servicebus.client.dll 271A644339B745372F1413F83A3E05F31EC12957 76EAEFA4ACBAB6DAA1645661575C648BD749A282F343ABE6A7AB282AAC50AABC
microsoft.cloud.servicebus.messaging.dll 0EAA9C6699AB63C170F947AC4212B8EF500F26E8 260CAA9B29EEB8C3C220782052222566DC5E362D6926B2CE13D98694D9FEA2CA
microsoft.servicebus.commands.dll 8360944F3E6F0E946489B22D0621D7DE299073A5 71156D1F044FE8B52950AC549703C9B106177ACFCC26A768A03BDB8C764D9CDB
microsoft.servicebus.dll 099C4AEA3D1CAC178816480FF991F6ED4E0C3E49 DF422FDCC026397E7F7C7BF6B4CD954461856CA3C96C254237E32D7FA864B491