PT-2023-17132 · Jianming · Jiangmin Antivirus

Zeze7W · Published 2023-03-25 · Updated 2024-05-17 · CVE-2023-1630

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jianming Antivirus version 16.2.2022.418

Description A problematic issue has been found in the library kvcore.sys of the component IOCTL Handler, affecting the function 0x222000. This leads to denial of service and requires local access to exploit. The issue has been publicly disclosed and may be used for attacks.

Recommendations For Jianming Antivirus version 16.2.2022.418, as a temporary workaround, consider disabling the 0x222000 function in the kvcore.sys library until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2023-1630

Affected Products

Jiangmin Antivirus

References · 10

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630 · Exploit
• 🔥 https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1630 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1630 · Vendor Advisory
• https://vuldb.com/?ctiid.224012 · Note
• https://t.me/cvenotify/46878 · Telegram Post
• https://t.me/cibsecurity/60745 · Telegram Post
• https://t.me/cvenotify/46858 · Telegram Post
• https://t.me/cvenotify/47205 · Telegram Post
• https://vuldb.com/?id.224012 · Note