CVE-2023-0908

Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service

CVSS 5.5 MEDIUMEPSS 0.2%CWE-404

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 fev 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

Xoslab · Easy File Locker

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 https://vuldb.com/?ctiid.221457 https://vuldb.com/?id.221457