CVE-2024-43639

Published Nov 12, 2024

Last updated 5 months ago

Windows

Kerberos

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-43639 is a vulnerability in the Microsoft Windows Key Distribution Center (KDC) Proxy, a component of the Windows Kerberos authentication system. It stems from a missing length check on Kerberos responses. An attacker can exploit this flaw by manipulating the KDC proxy to relay a Kerberos request to a server under their control. This server then sends a specially crafted, overly long response back to the KDC proxy, triggering an integer overflow and leading to arbitrary code execution. This vulnerability specifically affects Windows Servers configured as KDC Proxy Protocol servers. It does not affect Domain Controllers. Exploitation can be carried out remotely and does not require authentication. An attacker can leverage a specially crafted application to exploit the cryptographic protocol vulnerability in Windows Kerberos.

Description: Windows KDC Proxy Remote Code Execution Vulnerability
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo
secure@microsoft.com: CWE-197

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82E3AC46-9D0D-4381-93EE-FE87C212040A",
            "versionEndExcluding": "10.0.14393.7515"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A43E1F6C-B2A7-4DEC-B4EC-04153746C42B",
            "versionEndExcluding": "10.0.17763.6532"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "38D9CE84-B85F-42B0-959D-A390427A1641",
            "versionEndExcluding": "10.0.20348.2849"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A549BD98-3DE2-4EF3-A579-12AFCB764975",
            "versionEndExcluding": "10.0.25398.1251"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4F17FD7F-254D-4EE6-9D22-468E76D9B054",
            "versionEndExcluding": "10.0.26100.2314"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]