CVEvulnerability
CVE-2023-0908
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-404
Description
A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.
Affected configurations
• xoslab easy file locker 2.2.0.184
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 Third Party Advisory
- https://vuldb.com/?ctiid.221457 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221457 Permissions Required, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908 Third Party Advisory
- https://vuldb.com/?ctiid.221457 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221457 Permissions Required, Third Party Advisory