CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24414Patch KB5029308 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.21503Patch KB5029304 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26664Patch KB5029307 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.0.6003.22216Patch KB5029301 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.6167Patch KB5029242 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20107Patch KB5029259 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.2134Patch KB5029263 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.3324Patch KB5029244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.1906Fixed in 10.0.20348.1903Patch KB5029367 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.2295Patch KB5029253 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.4737Patch KB5029247
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38184?
CVE-2023-38184 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2023-38184?
To fix CVE-2023-38184, apply the relevant security updates provided by Microsoft for your affected Windows products.
Which products are affected by CVE-2023-38184?
CVE-2023-38184 affects various Windows Server and Windows operating systems, including Windows 10, Windows 11, and several versions of Windows Server.
What type of vulnerability is CVE-2023-38184?
CVE-2023-38184 is classified as a remote code execution vulnerability within the Windows LDAP service.
Can CVE-2023-38184 be exploited locally?
CVE-2023-38184 requires remote access for exploitation, making it primarily a network-based threat.