CVE-2023-24939
published 2023-05-09CVE-2023-24939: Server for NFS Denial of Service Vulnerability Server for NFS Denial of Service Vulnerability
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
4.66%
90.7th percentile
Server for NFS Denial of Service Vulnerability
Server for NFS Denial of Service Vulnerability
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19926 | 10.0.10240.19926 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.5921 | 10.0.14393.5921 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.4377 | 10.0.17763.4377 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.4377 | 10.0.17763.4377 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.2965 | 10.0.19042.2965 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.2965 | 10.0.19044.2965 |
| microsoft | windows_10_version_22h2 | >= 10.0.19045.0 < 10.0.19045.2965 | 10.0.19045.2965 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22000.1936 | 10.0.22000.1936 |
| microsoft | windows_11_version_22h2 | >= 10.0.22621.0 < 10.0.22621.1702 | 10.0.22621.1702 |
| microsoft | windows_server_2012 | >= 6.2.9200.0 < 6.2.9200.24266 | 6.2.9200.24266 |
| microsoft | windows_server_2012_r2 | >= 6.3.9600.0 < 6.3.9600.20969 | 6.3.9600.20969 |
| microsoft | windows_server_2016 | >= 10.0.14393.0 < 10.0.14393.5921 | 10.0.14393.5921 |
| microsoft | windows_server_2019 | >= 10.0.17763.0 < 10.0.17763.4377 | 10.0.17763.4377 |
| microsoft | windows_server_2022 | >= 10.0.20348.0 < 10.0.20348.1726 | 10.0.20348.1726 |
| msrc | windows_10 | — | — |
| msrc | windows_10_version_1607 | — | — |
| msrc | windows_10_version_1809 | — | — |
| msrc | windows_10_version_20h2 | — | — |
| msrc | windows_10_version_21h2 | — | — |
| msrc | windows_10_version_22h2 | — | — |
| msrc | windows_11_version_21h2 | — | — |
| msrc | windows_11_version_22h2 | — | — |
| msrc | windows_server_2012 | — | — |
| msrc | windows_server_2012_r2 | — | — |
| msrc | windows_server_2016 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
cvelistv57.5HIGH
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Server for NFS Denial of Service Vulnerability
vendor_msrc·2023-05-09·CVSS 7.5
CVE-2023-24939 [HIGH] Server for NFS Denial of Service Vulnerability
Server for NFS Denial of Service Vulnerability
Windows NFS Portmapper: Windows NFS Portmapper
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Denial of Service
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5026362
Reference: https://support.microsoft.com/help/5026362
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5026370
Reference: https://support.microsoft.com/help/5026370
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5026456
Reference: https://support.microsoft.com/help/5026456
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5026361
Reference: https://support
CVEList
Server for NFS Denial of Service Vulnerability
cvelistv5·2023-05-09·CVSS 7.5
CVE-2023-24939 [HIGH] Server for NFS Denial of Service Vulnerability
Server for NFS Denial of Service Vulnerability
Server for NFS Denial of Service Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-09
Published