CVE-2023-0908

A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.
References
Link Resource
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 Third Party Advisory
https://vuldb.com/?ctiid.221457 Permissions Required Third Party Advisory
https://vuldb.com/?id.221457 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:xoslab:easy_file_locker:2.2.0.184:*:*:*:*:*:*:*

History

01 Mar 2023, 17:06

Type Values Removed Values Added
CPE cpe:2.3:a:xoslab:easy_file_locker:2.2.0.184:*:*:*:*:*:*:*
First Time Xoslab
Xoslab easy File Locker
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References (MISC) https://vuldb.com/?id.221457 - (MISC) https://vuldb.com/?id.221457 - Permissions Required, Third Party Advisory
References (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 - (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 - Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.221457 - (MISC) https://vuldb.com/?ctiid.221457 - Permissions Required, Third Party Advisory

20 Feb 2023, 07:15

Type Values Removed Values Added
References
  • {'url': 'https://drive.google.com/file/d/1eow4SP11iEza9D4_Dz7hkouOqJQynA_2/view?usp=sharing', 'name': 'https://drive.google.com/file/d/1eow4SP11iEza9D4_Dz7hkouOqJQynA_2/view?usp=sharing', 'tags': [], 'refsource': 'MISC'}
  • (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 -

18 Feb 2023, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-02-18 08:15

Updated : 2024-04-11 01:17


NVD link : CVE-2023-0908

Mitre link : CVE-2023-0908

CVE.ORG link : CVE-2023-0908


JSON object : View

Products Affected

xoslab

  • easy_file_locker
CWE
CWE-404

Improper Resource Shutdown or Release