CVE-2022-32230— SMBv3 FileNormalizedNameInformation NULL Pointer Dereference

SMBv3 FileNormalizedNameInformation NULL Pointer Dereference

Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in the special case of Windows Domain Controllers, where unauthenticated users can always open named pipes as long as they can establish an SMB session. Typically, after the BSOD, the victim SMBv3 server will reboot.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

空指针解引用

Microsoft Windows SMBv3 代码问题漏洞

Microsoft Windows SMB Client和Microsoft Windows SMB Server都是美国微软（Microsoft）公司的产品。Microsoft Windows SMB Client是一个应用软件。一个SMB客户端。Microsoft Windows SMB Server是一个网络文件共享协议。它允许计算机上的应用程序读取和写入文件以及从计算机网络中的服务器程序请求服务。 Microsoft Windows SMBv3 存在代码问题漏洞，该漏洞源于存在空指针解引用问题。

N/A

N/A