PT-2023-1129

CVE-2023-21536

Published

2023-01-10

Updated

2024-05-29

Description by

CVSS 3.1

4.7

Medium

MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Event Tracing for Windows (affected versions not specified)

Description The issue is related to synchronization errors when using a shared resource in the Event Tracing service for Microsoft Windows operating systems. This can allow an attacker to disclose protected information. The vulnerability enables attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Danny Odler

Vendors

Affected products

Weakness enumeration

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

CWE-125: Out-of-bounds Read

CWE-668: Exposure of Resource to Wrong Sphere

Related identifiers

CVE-2023-21536