PT-2022-1662 · Microsoft · Windows Internet Key Exchange (Ike) Extension+1

Polar Bear · Published 2022-01-11 · Updated 2024-11-14 · CVE-2022-21883

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Windows Internet Key Exchange (IKE) Extension (affected versions not specified)

Description The issue is related to incorrect resource cleanup or release. It may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2022-00912

CVE-2022-21883

Affected Products

Windows

Windows Internet Key Exchange (Ike) Extension

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2022-21883 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-21883 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00912 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-21883 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21883 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/674009 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21883 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21883 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21883 · Note
• https://t.me/cibsecurity/35284 · Telegram Post
• https://t.me/cvenotify/25656 · Telegram Post