CVE-2023-38151

CWE-908 — Use of Uninitialized Resource4 documents4 sources
Severity
8.8HIGH
EPSS
0.3%
top 43.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Host Integration Server 2020Microsoft Host Integration ServerMicrosoft OLE DB Provider
Timeline
PublishedNov 14

Description

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5microsoft/host_integration_server_20207.0 — KB5032921+1

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rq23-3cx8-wmqf: Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability↗2023-11-14
▶
CVEList
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability↗2023-11-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability↗2023-11-14
▶
CVE-2023-38151 (HIGH CVSS 8.8) | Microsoft Host Integration Server 2 | cvebase.io