What is CVE-2023-24898?

CVE-2023-24898 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Windows SMB Denial of Service Vulnerability

Which CVE IDs does CVE-2023-24898 cover?

CVE-2023-24898 covers the following CVE IDs: CVE-2023-24898. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-24898?

CVE-2023-24898 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-24898?

CVE-2023-24898 affects 2 products, including: Windows Server 2022; Windows Server 2022 (Server Core installation).

CVE-2023-24898HighCVSS 7.5

Windows SMB Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 9, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-24898 →

📋 Description

What version of Windows Server 2022 is affected by this vulnerability? This vulnerability only affects the hotpatch version of Windows Server 2022. If you are not running this version of the operating system, no action is required for this vulnerability.

What is SMB over QUIC? SMB over QUIC introduces an alternative to the TCP network transport, providing secure, reliable connectivity to edge file servers over untrusted networks like the Internet. QUIC is an IETF-standardized protocol with many benefits when compared to TCP. For more information, please visit: SMB over QUIC.

🎯 Affected products2

Windows Server 2022
Windows Server 2022 (Server Core installation)

✅ Remediation

KB5026456 (Security Hotpatch Update) — fixed build 10.0.20348.1724

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24898
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5026456
referencehttps://support.microsoft.com/help/5026456