Microsoft : Security Vulnerabilities Published In 2022 (Denial of service)

Windows Kernel Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

Windows Kerberos Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability.

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability.

Windows Hyper-V Denial of Service Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability.

Windows Local Session Manager (LSM) Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-37973.

Windows Event Logging Service Denial of Service Vulnerability.

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability.

Windows Local Session Manager (LSM) Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-37998.

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability.

Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an integer underflow and a buffer overflow in the `_ux_host_class_cdc_ecm_mac_address_get` function which may be potentially exploited to achieve remote code execution or denial of service. Setting mac address string descriptor length to a `0` or `1` allows an attacker to introduce an integer underflow followed (string_length) by a buffer overflow of the `cdc_ecm -> ux_host_class_cdc_ecm_node_id` array. This may allow one to redirect the code execution flow or introduce a denial of service. The fix has been included in USBX release [6.1.12](https://github.com/azure-rtos/usbx/releases/tag/v6.1.12_rel). Improved mac address string descriptor length validation to check for unexpectedly small values may be used as a workaround.

HTTP V3 Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows Event Tracing Denial of Service Vulnerability

Azure Site Recovery Denial of Service Vulnerability

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability

Windows DNS Server Denial of Service Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability