Skip to content
OpenAdvisories
High MSRC-CVE-2023-38152 1 CVE

DHCP Server Service Information Disclosure Vulnerability

Published Sep 12, 2023 · Updated Sep 12, 2023

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L) but have no effect on integrity (I:N) or on availability (A:N). What does that mean for this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).

Security updates
10.0.17763.4851 — https://support.microsoft.com/help/5030214
10.0.20348.1970 — https://support.microsoft.com/help/5030216
10.0.20348.1964 — https://support.microsoft.com/help/5030325
10.0.14393.6252 — https://support.microsoft.com/help/5030213
6.0.6003.22264 — https://support.microsoft.com/help/5030271
6.0.6003.22264 — https://support.microsoft.com/help/5030286
6.1.7601.26713 — https://support.microsoft.com/help/5030265
6.1.7601.26713 — https://support.microsoft.com/help/5030261
6.2.9200.24462 — https://support.microsoft.com/help/5030278
6.2.9200.24462 — https://support.microsoft.com/help/5030279
6.3.9600.21563 — https://support.microsoft.com/help/5030269
6.3.9600.21563 — https://support.microsoft.com/help/5030287

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References