CVE-2023-21253

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 6, 2023
Updated: Oct 11, 2023
CWE ID 400

Summary

CVE-2023-21253 is a newly identified vulnerability that allows an attacker to cause multiple system services to crash through resource exhaustion. This issue can lead to local denial of service attacks, meaning the attacker does not require any additional execution privileges to exploit the vulnerability. Notably, user interaction is not necessary for successful exploitation. By exhausting system resources, critical services can be made unavailable, potentially causing significant disruptions to normal operations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share