Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.
References
| Link | Resource |
|---|---|
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
| https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ | Exploit Technical Description Third Party Advisory |
Configurations
History
21 Nov 2024, 06:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
09 Dec 2021, 14:11
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:amazon:workspaces:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 7.2
v3 : 8.8 |
| CWE | CWE-120 | |
| References | (MISC) https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/ - Exploit, Technical Description, Third Party Advisory |
07 Dec 2021, 20:31
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-12-07 20:15
Updated : 2024-11-21 06:29
NVD link : CVE-2021-43637
Mitre link : CVE-2021-43637
CVE.ORG link : CVE-2021-43637
JSON object : View
Products Affected
amazon
- workspaces
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')