PT-2023-1137 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Internet Key Exchange IKE protocol and is caused by insufficient input validation. This can be exploited by a remote attacker using specially crafted packets to...

PT-2023-1130 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Internet Key Exchange IKE extension, which can be exploited by a remote attacker to cause a denial of service using...

PT-2023-1234 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Internet Key Exchange IKE protocol in Windows operating systems, which is associated with insufficient input validation. This can be...

CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2023-21677

Technical details (affected products, root cause, exploitability, and fixes) for CVE-2023-21677 are not provided in the supplied documents. No specifics on impact or remediation are present. Monitor for updates.

CVE-2023-21758

Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.

PT-2023-1087 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Internet Key Exchange IKE protocol in Windows operating systems, specifically due to insufficient input validation. This can be exploited b...

CVE-2023-21547

CVE-2023-21547 is a vulnerability in the Windows Internet Key Exchange (IKE) Extension causing a Denial-of-Service. Multiple connected sources identify it as a network-‑accessible issue in the IKE protocol that can be triggered remotely without user interaction, with the root cause described as a...

Microsoft Windows Internet Key Exchange 安全漏洞

Microsoft Windows Internet Key Exchange is the Internet Key Exchange protocol in Windows from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Internet Key Exchange. An attacker could exploit this vulnerability to cause a denial of service on the system...

CVE-2023-21677 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2023-21683: NULL Pointer Dereference

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

CVE-2023-21677: Untrusted Pointer Dereference

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

Microsoft Windows IKE Extension 安全漏洞

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. An attacker could exploit this vulnerability to cause a denial of service on the system...

CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

CVE-2023-21758: NULL Pointer Dereference

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

Adversaries strike critical Windows IKE flaw in the “Bleed You” campaign

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary An active "Bleed You" campaign is leveraging a critical RCE CVE-2022-34721 vulnerability in Windows Internet Key Exchange IKE Protocol Extensions to assist subsequent malware and ransomware assaults and...

VulnCheck KEV: CVE-2022-34721

Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...

Oracle Linux 9 : podman (ELSA-2022-7954)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7954 advisory. 2:4.2.0-3.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117404 2:4.2.0-3 - fix dependency in test subpackage - Related:...

PT-2022-27425 · Simplexmq +1 · Simplexmq +1

Name of the Vulnerable Software and Affected Versions: SimpleXMQ versions prior to 3.4.0 SimpleX Chat versions prior to 4.2 Description: The issue occurs in the X3DH key exchange for the double ratchet protocol, where a key derivation function is not applied to intended data. This can interfere...

CVE-2022-45195

SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet...