CVE-2023-35331

Опубликовано: 11 июл. 2023

Источник: msrc

CVSS3: 6.5

EPSS Низкий

Описание

Windows Local Security Authority (LSA) Denial of Service Vulnerability

FAQ

According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.

Обновления

Продукт	Статья	Обновление
Windows Server 2012	5028232 5028233	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5028232 5028233	Monthly Rollup Security Only
Windows Server 2012 R2	5028228 5028223	Monthly Rollup Security Only
Windows Server 2012 R2 (Server Core installation)	5028228 5028223	Monthly Rollup Security Only
Windows Server 2016	5028169	Security Update
Windows Server 2016 (Server Core installation)	5028169	Security Update
Windows Server 2019	5028168	Security Update
Windows Server 2019 (Server Core installation)	5028168	Security Update
Windows Server 2022	5028171	Security Update
Windows Server 2022 (Server Core installation)	5028171	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 38%

0.00157

Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVE-2023-35331

CVSS3: 6.5

nvd

почти 2 года назад

Windows Local Security Authority (LSA) Denial of Service Vulnerability

GHSA-xc56-98rm-xc98

CVSS3: 6.5

github

почти 2 года назад

Windows Local Security Authority (LSA) Denial of Service Vulnerability

BDU:2023-04214

CVSS3: 7.8

fstec

почти 2 года назад

Уязвимость службы Local Security Authority (LSA) операционной системы Windows, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 38%

0.00157

Низкий

6.5 Medium

CVSS3