CVEvulnerability

CVE-2021-43638

8.8 HIGH Published 2021-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-190

Description

Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

Affected configurations

• amazon workspaces (< 1.0.1.1537)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References