MSRC-CVE-2023-24898 — Windows SMB Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What version of Windows Server 2022 is affected by this vulnerability?
This vulnerability only affects the hotpatch version of Windows Server 2022. If you are not running this version of the operating system, no action is required for this vulnerability.

What is SMB over QUIC?
SMB over QUIC introduces an alternative to the TCP network transport, providing secure, reliable connectivity to edge file servers over untrusted networks like the Internet. QUIC is an IETF-standardized protocol with many benefits when compared to TCP. For more information, please visit: SMB over QUIC.

Security updates
10.0.20348.1724 — https://support.microsoft.com/help/5026456

Vulnerabilities 1

High 7.5

CVE-2023-24898

Windows SMB Denial of Service Vulnerability

Windows SMB Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows

May 9, 2023

Revision history

2023-05-09 #1
Information published.

References

CVE-2023-24898 Windows SMB Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24898
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss