CVE-2021-43637

High

Description

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.

SeverityHigh
CVSS8.8
Exploit probability—
ProductAmazon Workspaces
PublishedDec 7, 2021
First seenDec 7, 2021

How to fix

Update
  • amazon workspaces1.0.1.1537 or later

Affected products

ProductAffected versionsFixed in
amazon workspacesv < 1.0.1.15371.0.1.1537

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.