Headline

CVE-2023-35298

HTTP.sys Denial of Service Vulnerability

1 year ago

**How could an attacker exploit this vulnerability?** In most situations, an unauthenticated attacker could send a specially crafted packet to a targeted server utilizing the Server Name Indication (SNI) over HTTP Protocol Stack (http.sys) to process packets, causing a denial of service (DOS).

1 year ago

Microsoft Security Response Center

Open in Source

#vulnerability #web #microsoft #dos #auth #Windows HTTP.sys #Security Vulnerability