Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities allow a malicious person to carry out attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution Administrator/Root rights Remote code execution User rights Access to...

Microsoft Windows iSCSI 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows iSCSI. The following products and editions are affected:Windows Server 2012,Windows Server 2012 Server Core installation,Windows Serve...

PT-2023-1592 · Microsoft · Windows Iscsi Service +1

Name of the Vulnerable Software and Affected Versions: Windows iSCSI Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Service, which can be exploited by a remote attacker to cause a denial of service. Recommendations: ...

CVE-2023-21811: Buffer Over-read

Windows iSCSI Service Denial of Service Vulnerability...

CVE-2023-21702: Out-of-bounds Read

Windows iSCSI Service Denial of Service Vulnerability...

CVE-2023-21700: NULL Pointer Dereference

Windows iSCSI Discovery Service Denial of Service Vulnerability...

CVE-2023-21803: Integer Overflow or Wraparound

Windows iSCSI Discovery Service Remote Code Execution Vulnerability...

KB5022858: Windows 10 LTS 1507 Security Update (February 2023)

The remote Windows host is missing security update 5022858. It is, therefore, affected by multiple vulnerabilities - Windows iSCSI Discovery Service Remote Code Execution Vulnerability CVE-2023-21803 - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684,...

KLA20233 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

KB5022838: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2023)

The remote Windows host is missing security update 5022838. It is, therefore, affected by multiple vulnerabilities - Windows iSCSI Discovery Service Remote Code Execution Vulnerability CVE-2023-21803 - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684,...

KB5022893: Windows Server 2008 Security Update (February 2023)

The remote Windows host is missing security update 5022893. It is, therefore, affected by multiple vulnerabilities - Windows iSCSI Discovery Service Remote Code Execution Vulnerability CVE-2023-21803 - Microsoft PostScript Printer Driver Remote Code Execution Vulnerability CVE-2023-21684,...

GSD-2023-1002034 scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress

scsi: iscsitcp: Fix UAF during logout when accessing the shost ipaddress This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.93 by commit...

PT-2023-35110 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue is related to a use-after-free UAF error during logout when accessing the shost ipaddress in the iscsi tcp module of the Linux Kernel. The actual impact and attack plausibility ha...

PT-2023-35109 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.93 Description: The issue is related to a use-after-free UAF error during the login process when accessing the shost ip address in the iscsi tcp module. The actual impact and attack plausibility have not y...

PT-2023-34948 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a use-after-free UAF error during logout when accessing the shost ipaddress in the iscsi tcp module of the Linux Kernel. The actual impact and attack plausibility hav...

PT-2023-34947 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.11 Description: The issue is related to a use-after-free UAF error during the login process when accessing the shost ip address in the iscsi tcp module of the Linux Kernel. The actual impact and attack...

CVE-2023-0415

A flaw was found in the iSCSI dissector of Wireshark. This issue occurs when decoding malformed packets from a pcap file or from the network, causing a NULL pointer dereference, resulting in a Denial of Service...

CVE-2023-0415

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...

CVE-2023-0415

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...

Design/Logic Flaw

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file...