CVE-2024-43642

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 416

Summary

CVE-2024-43642 is a newly disclosed Denial of Service (DoS) vulnerability affecting Windows Server's Server Message Block (SMB) protocol. This issue allows an unauthenticated attacker to send a specially crafted packet to trigger a memory leak, leading to a denial of service condition on the targeted system. The vulnerability can potentially be exploited to cause significant network disruption and decreased performance. It is strongly recommended that affected organizations install the Microsoft released patch to mitigate this risk. This vulnerability can be exploited remotely, making it a serious concern for organizations with exposed SMB servers.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows 11

Affected Vendors

  • Microsoft