{"id":"CVE-2023-1630","aliases":["EUVD-2023-23861","GHSA-3mrc-6j78-v932"],"status":"published","title":"JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service","description":"A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00318,"percentile":0.24973,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2023-03-25T11:31:03Z","modified":"2026-06-17T05:28:24Z","products":[{"vendor":"avast","product":"antivirus"},{"vendor":"jiangmin","product":"antivirus"},{"vendor":"jiangmin","product":"jiangmin_antivirus"}],"references":[{"url":"https://vuldb.com/?id.224012","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.224012","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1630","tags":["related","x_transferred","Third Party Advisory"]},{"url":"https://drive.google.com/file/d/1fQFw8ayQUFzJM2_4V-ld8CN8gvisVoiu/view","tags":["exploit","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1630"},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned29"},{"url":"https://github.com/advisories/GHSA-3mrc-6j78-v932"}],"sources":{"cve":[{"id":"CVE-2023-1630","title":"JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service","description":"A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.","status":"published","published":"2023-03-25T11:31:03.145Z","modified":"2024-08-02T05:57:24.712Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-23861","description":"A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.","status":"published","published":"2023-03-25T11:31:03Z","modified":"2024-08-02T05:57:24Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:15.01159Z"}],"ghsa":[{"id":"GHSA-3mrc-6j78-v932","title":"A vulnerability, which was classified as problematic, has been found in Jianming Antivirus 16.2...","description":"A vulnerability, which was classified as problematic, has been found in Jianming Antivirus 16.2.2022.418. Affected by this issue is some unknown functionality in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.","status":"published","published":"2023-03-25T12:30:48Z","modified":"2023-04-07T05:07:38Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:54:27.812339Z"}],"nvd":[{"id":"CVE-2023-1630","description":"A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in the library kvcore.sys of the component IOCTL Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224012.","status":"published","published":"2023-03-25T12:15:07.057Z","modified":"2026-06-17T05:28:24.547Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"secondary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:50.908252Z"}]}}