PT-2024-7971 · Microsoft · Windows Kdc Proxy+1

K0Shl + 1 · Published 2024-11-12 · Updated 2025-03-07 · CVE-2024-43639

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows KDC Proxy (affected versions not specified)

Description The vulnerability allows remote attackers to execute arbitrary code and affect the system. It is related to errors in the implementation of the Kerberos Key Distribution Center (KDC) Proxy Protocol in Windows operating systems. The issue is due to the function KpsSocketRecvDataIoCompletion not checking large values of the Kerberos response length, leading to a 32-bit overflow and allowing attackers to execute malicious code without authentication. The vulnerability can be exploited by sending a forged Kerberos response, forcing the proxy to connect to a fake domain controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-197

Related Identifiers

BDU:2024-09484

CVE-2024-43639

Affected Products

Windows

Windows Kdc Proxy

References · 30

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43639 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09484 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43639 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43639 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43639 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-43639 · Vendor Advisory
• https://t.me/avleonovcom/1469 · Telegram Post
• https://t.me/cybersecuritytechnologies/11893 · Telegram Post
• https://twitter.com/UndercodeNews/status/1858667358883315904 · Twitter Post
• https://t.me/cvenotify/101628 · Telegram Post
• https://twitter.com/UndercodeNews/status/1858664671999352994 · Twitter Post
• https://twitter.com/ksg93rd/status/1898122209580966281 · Twitter Post
• https://twitter.com/transilienceai/status/1859099801272434751 · Twitter Post
• https://twitter.com/thezdi/status/1896970012172443956 · Twitter Post
• https://twitter.com/4imag1/status/1860352695871119787 · Twitter Post