PT-2023-1022 · Microsoft · Windows

·

CVE-2023-21546

·

Publicado

2023-01-10

·

Atualizado

2024-05-29

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version
Description The issue is related to the implementation of the Layer 2 Tunneling Protocol (L2TP) in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be exploited by a remote attacker who sends a specially crafted connection request to a RAS server, potentially allowing the execution of arbitrary code. The vulnerability enables remote attackers to execute arbitrary code and impact the system.
Recommendations For Windows versions prior to the fixed version, apply the necessary patch or update to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Race Condition

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00113
CVE-2023-21546

Produtos afetados

Windows