← back
CVE-2023-21819

Windows Secure Channel Denial of Service Vulnerability

CVSS 7.5 HIGHEPSS 30.8%CWE-125
In short

A flaw in Windows Secure Channel (the system that handles encrypted connections) allows an attacker to crash or hang the service by sending specially crafted network packets, disrupting secure communications.

Technical detail

This out-of-bounds read vulnerability in Windows Secure Channel allows remote, unauthenticated attackers to trigger a denial of service condition by sending malicious TLS/SSL packets that cause improper memory access. The vulnerability requires network connectivity to affected systems and results in service unavailability rather than data compromise.

Summary generated and translated by AI from the official description.
Windows Secure Channel Denial of Service Vulnerability
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →