Work

Critical analysis of CVE-2024-38063: the Microsoft IPv6-vulnerability

Year: 2025

Type: article

Abstract: CVE-2024-38063 was claimed to be a critical remote code execution vulnerability in the Microsoft Windows IPv6 stack due to an integer underflow and heap-based buffer overflow. This paper analyzes the vulnerability’s root cause, demonstrates a proof-of-concept exploit, and evaluates its reproducibility under various patch levels. The analysis highlights the implications of a conditional patch rollback mechanism and discusses mitigation strategies. Additionally, it recalculates the CVSS score basing on these findings.

Source: Common Library Network (Der Gemeinsame Bibliotheksverbund)

DOI: 10.22032/dbt.67106

Authors: Kerutt, Bennet, Lorenz, Bastian, Schwarz, Monina, Kaven, Sascha, Skwarek, Volker

Language: English

Topic: Security and Verification in Computing

Subfield: Artificial Intelligence

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W7078757411

FWCI:

Cites:

Cited by:

Related to: