CVE Vulnerabilities

CVE-2023-38171

NULL Pointer Dereference

Published: Oct 10, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
root.io logo minimus.io logo echo.ai logo

Microsoft QUIC Denial of Service Vulnerability

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
.netMicrosoft7.0.0 (including)7.0.12 (excluding)
Visual_studio_2022Microsoft17.2.0 (including)17.2.20 (excluding)
Visual_studio_2022Microsoft17.4.0 (including)17.4.12 (excluding)
Visual_studio_2022Microsoft17.6.0 (including)17.6.8 (excluding)
Visual_studio_2022Microsoft17.7.0 (including)17.7.5 (excluding)
Windows_11_22h2Microsoft*10.0.22621.2428 (excluding)
Windows_server_2022Microsoft- (including)- (including)

Potential Mitigations

References