TCP: Microsoft Windows KDC Proxy KpsSocketRecvDataIoCompletion Integer Overflow
This signature detects attempts to exploit a known vulnerability against Microsoft Windows KDC Proxy. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the Microsoft Windows.
Extended Description
Windows KDC Proxy Remote Code Execution Vulnerability
Affected Products
Microsoft windows_server_2016
References
CVE: CVE-2024-43639
Short Name
TCP:S2C:WINDOWS-KDC-OVERFLOW
Severity
Major
Recommended
True
Recommended Action
Drop
Category
TCP
Keywords
CVE-2024-43639 Integer KDC KpsSocketRecvDataIoCompletion Microsoft Overflow Proxy Windows
Release Date
03/14/2025
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3791
False Positive
Unknown
Vendors
Microsoft