{"id":"CVE-2023-0908","aliases":["EUVD-2023-12896","GHSA-7r9m-hjrf-8cx2"],"status":"published","title":"Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service","description":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00229,"percentile":0.13829,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2023-02-18T07:55:18Z","modified":"2026-06-17T05:26:36Z","products":[{"vendor":"xoslab","product":"easy file locker"},{"vendor":"xoslab","product":"easy_file_locker"}],"references":[{"url":"https://vuldb.com/?id.221457","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.221457","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0908","tags":["exploit","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0908"},{"url":"https://drive.google.com/file/d/1eow4SP11iEza9D4_Dz7hkouOqJQynA_2/view?usp=sharing"},{"url":"https://github.com/advisories/GHSA-7r9m-hjrf-8cx2"}],"sources":{"cve":[{"id":"CVE-2023-0908","title":"Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service","description":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.","status":"published","published":"2023-02-18T07:55:18.522Z","modified":"2024-08-02T05:24:34.717Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-12896","description":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.","status":"published","published":"2023-02-18T07:55:18Z","modified":"2024-08-02T05:24:34Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:16.011444Z"}],"ghsa":[{"id":"GHSA-7r9m-hjrf-8cx2","title":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0...","description":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.","status":"published","published":"2023-02-18T09:30:16Z","modified":"2023-03-09T05:06:34Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:54:18.225969Z"}],"nvd":[{"id":"CVE-2023-0908","description":"A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-221457 was assigned to this vulnerability.","status":"published","published":"2023-02-18T08:15:42.657Z","modified":"2026-06-17T05:26:36.547Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"secondary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:47.623983Z"}]}}