943 matches found
CVE-2023-21758
Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.
CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
...
KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...
CVE-2023-21677 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
...
CVE-2023-21683
Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.
Adversaries strike critical Windows IKE flaw in the “Bleed You” campaign
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary An active "Bleed You" campaign is leveraging a critical RCE CVE-2022-34721 vulnerability in Windows Internet Key Exchange IKE Protocol Extensions to assist subsequent malware and ransomware assaults and...
CVE-2022-40735
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...
Design/Logic Flaw
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "appropriately short exponents" can be used when there are adequate subgroup constraints, and these sho...
Denial of service
Internet Key Exchange IKE Protocol Denial of Service Vulnerability...
KB5018418: Windows 11 Security Update (October 2022)
The remote Windows host is missing security update 5018418. It is, therefore, affected by multiple vulnerabilities - Internet Key Exchange IKE Protocol Denial of Service Vulnerability CVE-2022-38036 - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft...
CVE-2022-38036 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
...
Unspecified Vulnerability in Microsoft Windows (CNVD-2022-63614)
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows IKE Extension. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in Microsoft Windows Internet
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A security vulnerability exists in Microsoft Windows IKE Extension. No details of the vulnerability are provided at this time...
Update now! Microsoft patches two zero-days
The Microsoft September 2022 Patch Tuesday includes fixes for two publicly disclosed zero-day vulnerabilities, one of which is known to be actively exploited. Five of the 60+ security vulnerabilities were rated as "Critical", and 57 as important. Two vulnerabilities qualify as zero-days, with one...
CVE-2022-34720
Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...
CVE-2022-34722
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
CVE-2022-34721
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
Remote code execution
Windows Internet Key Exchange IKE Protocol Extensions Remote Code Execution Vulnerability...
CVE-2022-34722
CVE-2022-34722 is a Windows IKE Protocol Extensions RCE affecting systems with IPSec enabled and IKEv1 in use. An unauthenticated attacker could send a crafted IP packet to execute arbitrary code on vulnerable Windows hosts; Ikev2 is not affected. The vulnerability is classified as critical (CVSS...