0.0
NA
CVE-2024-6768
Microsoft CLFS.sys Kernel Denial of Service Vulnerability
Description

A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx function.

INFO

Published Date :

Aug. 12, 2024, 7:15 p.m.

Last Modified :

Aug. 13, 2024, 12:58 p.m.

Source :

df4dee71-de3a-4139-9588-11b62fe6c0ff

Remotely Exploitable :

No

Impact Score :

Exploitability Score :

Public PoC/Exploit Available at Github

CVE-2024-6768 has a 3 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2024-6768 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Microsoft windows_10
2 Microsoft windows_server_2016
3 Microsoft windows_server_2019
4 Microsoft windows_server_2022
: Total Affected Vendor : 1 | Products : 4
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-6768.

URL Resource
https://www.fortra.com/security/advisories/research/fr-2024-001

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
fortra/CVE-2024-6768

None

C++ C

Updated: 1 month, 3 weeks ago
13 stars 4 fork 4 watcher
Born at : July 18, 2024, 7:52 a.m. This repo has been linked 3 different CVEs too.
Profile Photo
ycdxsb/WindowsPrivilegeEscalation

Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)

Updated: 2 weeks, 3 days ago
328 stars 62 fork 62 watcher
Born at : April 22, 2021, 3:29 a.m. This repo has been linked 276 different CVEs too.
Profile Photo
nomi-sec/PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

security cve exploit poc vulnerability

Updated: 2 weeks, 3 days ago
6566 stars 1140 fork 1140 watcher
Born at : Dec. 8, 2019, 1:03 p.m. This repo has been linked 958 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-6768 vulnerability anywhere in the article.

  • Cybersecurity News
From Charging to Hijacking: The Autel MaxiCharger Vulnerability

Image: Sector 7The transition to electric vehicles (EVs) is rapidly gaining momentum, but the recent Pwn2Own Automotive 2024 competition in Tokyo has revealed a concerning vulnerability: EV chargers t ... Read more

Published Date: Sep 11, 2024 (3 months, 1 week ago)
CVE-2024-23967 CVE-2024-23959 CVE-2024-23958 CVE-2024-6671 CVE-2024-6670 CVE-2024-40766 CVE-2024-6768
  • Cybersecurity News
CVE-2024-30051: Windows Elevation of Privilege Flaw Exploited by QakBot Malware, PoC Published

Security researchers published the technical details and a proof-of-concept exploit (PoC) code for a zero-day vulnerability in Windows, tracked as CVE-2024-30051, which could allow attackers to escala ... Read more

Published Date: Sep 10, 2024 (3 months, 1 week ago)
CVE-2024-20469 CVE-2024-6633 CVE-2024-6768 CVE-2024-34102 CVE-2024-30051 CVE-2024-30040 CVE-2024-1024 CVE-2023-4863
  • Cybersecurity News
SonicWall Confirms Critical CVE-2024-40766 Vulnerability Actively Exploited in the Wild

On September 5, 2024, SonicWall updated its security advisory with an urgent warning: CVE-2024-40766, a critical access control vulnerability within SonicOS, is being actively exploited by cybercrimin ... Read more

Published Date: Sep 06, 2024 (3 months, 2 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-40766 CVE-2024-6768 CVE-2024-40764 CVE-2024-22394
  • Cybersecurity News
Godzilla Backdoor: A Stealthy Threat Targeting Atlassian Confluence Flaw (CVE-2023-22527)

Attack chain | Image: TrendMicroA recent discovery by cybersecurity researchers at Trend Micro has unveiled a sophisticated new attack vector targeting Atlassian Confluence servers, leveraging the cri ... Read more

Published Date: Aug 30, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-6768 CVE-2023-22527 CVE-2018-0824
  • Cybersecurity News
Critical CVE-2024-45321 Flaw in Popular Perl Module Installer cpanminus, No Patch Available

In a significant security advisory, the Perl community has been alerted to a critical vulnerability, CVE-2024-45321, affecting the widely-used App::cpanminus (cpanm) tool. Rated with a CVSS score of 9 ... Read more

Published Date: Aug 29, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-45321 CVE-2024-6768 CVE-2023-47039 CVE-2023-47038 CVE-2023-47100 CVE-2018-0824
  • Cybersecurity News
Mirai Botnet Exploits Zero-Day Vulnerability CVE-2024-7029 in AVTECH IP Cameras

Akamai’s Security Intelligence Response Team (SIRT) has discovered a widespread Mirai botnet campaign exploiting a recently disclosed zero-day vulnerability (CVE-2024-7029) in AVTECH IP cameras. The v ... Read more

Published Date: Aug 29, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-6768 CVE-2024-7029 CVE-2024-21887 CVE-2023-46805 CVE-2023-1389 CVE-2018-0824 CVE-2017-17215 CVE-2014-8361
  • Cybersecurity News
Critical Vulnerabilities Expose Hitachi Energy MicroSCADA X SYS600 to Cyberattacks

Hitachi Energy has issued a cybersecurity advisory addressing multiple critical vulnerabilities discovered in their MicroSCADA X SYS600 product, widely used for monitoring and controlling power system ... Read more

Published Date: Aug 29, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-7941 CVE-2024-7940 CVE-2024-4872 CVE-2024-3982 CVE-2024-3980 CVE-2024-6768 CVE-2018-0824
  • Cybersecurity News
New Attack on Microsoft 365 Copilot Steals Personal Data

A cybersecurity researcher has uncovered a critical vulnerability in the AI-powered assistant Copilot, integrated into Microsoft 365, which enables malicious actors to exfiltrate sensitive data.The ex ... Read more

Published Date: Aug 29, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-6768 CVE-2024-38206 CVE-2023-27482 CVE-2018-0824
  • Cybersecurity News
BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics

The BlackByte ransomware group has re-emerged with an unsettling surge in activity and a refined set of tactics, techniques, and procedures (TTPs) that pose a heightened risk to organizations. Cisco T ... Read more

Published Date: Aug 29, 2024 (3 months, 3 weeks ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-6768 CVE-2024-37085 CVE-2018-0824
  • Cybersecurity News
CVE-2024-38206: SSRF Vulnerability in Microsoft Copilot Studio Exposes Internal Infrastructure

Tenable Research has discovered a critical server-side request forgery (SSRF) vulnerability in Microsoft’s Copilot Studio, potentially allowing attackers to gain access to sensitive internal resources ... Read more

Published Date: Aug 23, 2024 (4 months ago)
CVE-2024-6768 CVE-2024-38206 CVE-2024-39601 CVE-2024-37998 CVE-2018-0824
  • Cybersecurity News
SolarWinds Web Help Desk Hit by Critical Vulnerability (CVE-2024-28987)

SolarWinds has issued an urgent security advisory for its Web Help Desk (WHD) software, warning of a critical hardcoded credential vulnerability (CVE-2024-28987) that poses a significant risk to organ ... Read more

Published Date: Aug 22, 2024 (4 months ago)
CVE-2024-28987 CVE-2024-28986 CVE-2024-6768 CVE-2024-39601 CVE-2024-37998 CVE-2018-0824
  • Cybersecurity News
Lazarus Group Exploits Microsoft Zero-Days CVE-2024-38193, Patch Urgently

Last week, Microsoft addressed multiple high-severity security vulnerabilities in its security updates, some of which have already been exploited by hackers. For instance, the CVE-2024-38193 (CVSS 7.8 ... Read more

Published Date: Aug 20, 2024 (4 months ago)
CVE-2024-6671 CVE-2024-6670 CVE-2024-38193 CVE-2024-6768 CVE-2018-0824
  • Cybersecurity News
Windows Sandbox Gets Supercharged: Clipboard and File Sharing Arrive

Microsoft continues to refine its Windows 11 experience with the introduction of significant updates to the Windows Sandbox application in the latest Windows 11 Canary Build 27686. Designed as a secur ... Read more

Published Date: Aug 16, 2024 (4 months, 1 week ago)
CVE-2024-6768 CVE-2024-39601 CVE-2024-37998 CVE-2024-37085 CVE-2018-0824
  • Cybersecurity News
Critical Vulnerability Found in Flatpak: CVE-2024-42472 (CVSS 10) Exposes Files Outside Sandbox

Please enable JavaScriptA serious security flaw has been discovered in Flatpak, a popular system for distributing and running sandboxed desktop applications on Linux. The vulnerability, tracked as CVE ... Read more

Published Date: Aug 16, 2024 (4 months, 1 week ago)
CVE-2024-42472 CVE-2024-6768 CVE-2024-39601 CVE-2024-37998 CVE-2024-20419 CVE-2024-32462 CVE-2024-1933 CVE-2023-28101 CVE-2023-28100 CVE-2018-0824
  • TheCyberThrone
SolarWinds fixes a critical vulnerability in Help Desk Product -CVE-2024-28986

SolarWinds has released patches for a critical vulnerability in its Web Help Desk software.The vulnerability, tracked as CVE-2024-28986, with a CVSS score of 9.8, allows for Java Deserialization Remot ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-28986 CVE-2024-6768 CVE-2024-7348 CVE-2023-35082
  • TheCyberThrone
SAP Patch Tuesday – August 2024

SAP has released its monthly security patches for August 2024, addressing vulnerabilities across its product portfolio. The update includes fixes for 17 new security notes and 8 updates to previously ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-42373 CVE-2024-41734 CVE-2024-39591 CVE-2024-42376 CVE-2024-42375 CVE-2024-42374 CVE-2024-41737 CVE-2024-41736 CVE-2024-41735 CVE-2024-41733 ...+17 more CVE
  • TheCyberThrone
Ivanti fixes Vulnerabilities in its ITSM Product

Ivanti has released patches for two vulnerabilities in its Neurons for IT Service Management (ITSM) platform, with potential risks ranging from unauthorized information disclosure to full system compr ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-7570 CVE-2024-7569 CVE-2024-6768 CVE-2024-7589 CVE-2024-7348 CVE-2023-35082
  • The Hacker News
Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits

Windows Security / Vulnerability Microsoft on Tuesday shipped fixes to address a total of 90 security flaws, including 10 zero-days, of which six have come under active exploitation in the wild. Of th ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-38213 CVE-2024-38199 CVE-2024-38198 CVE-2024-38193 CVE-2024-38189 CVE-2024-38178 CVE-2024-38107 CVE-2024-38106 CVE-2024-6768 CVE-2024-38200 ...+4 more CVE
  • TheCyberThrone
CISA adds Microsoft Patch Tuesday bugs to its Catalog

The US CISA adds 6 Microsoft vulnerabilities to its Known Exploited Vulnerabilities Catalog that is released as part of patch Tuesday, August 2024.CVE-2024-38189 – Microsoft Project Remote Code Execut ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-38213 CVE-2024-38193 CVE-2024-38189 CVE-2024-38178 CVE-2024-38107 CVE-2024-38106 CVE-2024-6768 CVE-2024-7589 CVE-2024-7348
  • TheCyberThrone
Microsoft Patch Tuesday-August 2024

Microsoft patched 90 CVEs in its August 2024 Patch Tuesday release, with seven rated critical, 82 rated as important, and one rated as moderate.This includes updates for vulnerabilities in Microsoft O ... Read more

Published Date: Aug 14, 2024 (4 months, 1 week ago)
CVE-2024-38163 CVE-2024-38223 CVE-2024-38215 CVE-2024-38214 CVE-2024-38213 CVE-2024-38211 CVE-2024-38201 CVE-2024-38199 CVE-2024-38198 CVE-2024-38197 ...+83 more CVE
  • TheCyberThrone
PostgreSQL TOCTOU Vulnerability CVE-2024-7348

PostgreSQL has released a security advisory, related to a vulnerability that exposes users to the risk of arbitrary SQL execution during pg_dump operations, potentially allowing attackers to execute h ... Read more

Published Date: Aug 13, 2024 (4 months, 1 week ago)
CVE-2024-6768 CVE-2024-7589 CVE-2024-7348
  • Cyber Security News
CLFS Vulnerability Let Hackers Trigger BSOD Error On All Versions Of Windows 10 & 11

A newly discovered vulnerability in the Common Log File System (CLFS.sys) driver of Windows has been identified, potentially affecting millions of devices running Windows 10, Windows 11, and various W ... Read more

Published Date: Aug 13, 2024 (4 months, 1 week ago)
CVE-2024-6768
  • TheCyberThrone
Windows CLFS bug leads to a DoS condition CVE-2024-6768

Researchers from Fortra come with a warning of a vulnerability in all versions of Windows 10 and 11 that can cause system instability and a denial of service.The vulnerability tracked as CVE-2024-6768 ... Read more

Published Date: Aug 13, 2024 (4 months, 1 week ago)
CVE-2024-6768 CVE-2024-7589 CVE-2024-7553
  • Cybersecurity News
Windows Users Beware: CVE-2024-6768 – New ‘Blue Screen of Death’ Vulnerability Affects All

A newly discovered vulnerability in the Windows operating system has raised concerns among cybersecurity experts due to its potential to trigger the infamous “Blue Screen of Death” (BSOD). Identified ... Read more

Published Date: Aug 13, 2024 (4 months, 1 week ago)
CVE-2024-6768 CVE-2024-39601 CVE-2024-37998 CVE-2024-20419 CVE-2024-0259 CVE-2024-0204 CVE-2018-0824
  • Dark Reading
CLFS Bug Crashes Even Updated Windows 10, 11 Systems

Source: Maurice Savage via Alamy Stock PhotoA simple bug in the Common Log File System (CLFS) driver can instantly trigger the infamous blue screen of death across any recent versions of Windows.CLFS ... Read more

Published Date: Aug 12, 2024 (4 months, 1 week ago)
CVE-2024-6768

The following table lists the changes that have been made to the CVE-2024-6768 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Received by df4dee71-de3a-4139-9588-11b62fe6c0ff

    Aug. 12, 2024

    Action Type Old Value New Value
    Added Description A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the KeBugCheckEx function.
    Added Reference Fortra https://www.fortra.com/security/advisories/research/fr-2024-001 [No types assigned]
    Added CWE Fortra CWE-1284
    Added CVSS V4.0 Fortra CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-6768 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-6768 weaknesses.

NONE - Vulnerability Scoring System
: