【深信服-紧急漏洞通告】

尊敬的用户，您好，近日深信服安全团队发现以下最新漏洞威胁。

漏洞名称：网间控制报文协议 (ICMP) 远程代码执行漏洞

漏洞描述：

2023年3月15日，深信服安全团队监测到一则Windows TCP/IP协议栈组件存在网间控制报文协议(ICMP)远程代码执行漏洞的信息，漏洞编号：CVE-2023-23415，漏洞威胁等级：严重。

该漏洞是由于判断不严格，攻击者可利用该漏洞在未授权的情况下，构造恶意数据执行远程代码执行攻击，最终获取服务器最高权限。

影响范围：

Windows 10 Version 20H2 for 32-bit Systems

Windows 10 Version 20H2 for x64-based Systems

Windows Server 2022 (Server Core installation)

Windows Server 2022 (Server Core installation)

Windows Server 2022

Windows Server 2022

Windows Server 2019 (Server Core installation)

Windows Server 2019

Windows 10 Version 1809 for ARM64-based Systems

Windows 10 Version 1809 for x64-based Systems

Windows 10 Version 1809 for 32-bit Systems

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2 (Server Core installation)

Windows Server 2012 R2

Windows Server 2012 R2

Windows Server 2012 (Server Core installation)

Windows Server 2012 (Server Core installation)

Windows Server 2012

Windows Server 2012

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for x64-based Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows Server 2008 for 32-bit Systems Service Pack 2

Windows 10 Version 20H2 for ARM64-based Systems

Windows Server 2016 (Server Core installation)

Windows Server 2016

Windows 10 Version 1607 for x64-based Systems

Windows 10 Version 1607 for 32-bit Systems

Windows 10 for x64-based Systems

Windows 10 for 32-bit Systems

Windows 10 Version 22H2 for 32-bit Systems

Windows 10 Version 22H2 for ARM64-based Systems

Windows 10 Version 22H2 for x64-based Systems

Windows 11 Version 22H2 for x64-based Systems

Windows 11 Version 22H2 for ARM64-based Systems

Windows 10 Version 21H2 for x64-based Systems

Windows 10 Version 21H2 for ARM64-based Systems

Windows 10 Version 21H2 for 32-bit Systems

Windows 11 version 21H2 for ARM64-based Systems

Windows 11 version 21H2 for x64-based Systems

扩展阅读：https://doublepulsar.com/a-look-at-cve-2023-23415-a-windows-icmp-vulnerability-mitigations-which-is-not-a-cyber-meltdown-78a9f7e3e538
TL;DR: 见上图

https://www.bilibili.com/video/av611328856

「这男的怎么进去了」

好久不见，我又回来辣

https://guo.moe/archives/come-back-again-2023.html

好久没弹过琴了，来一首老人与海怀一下旧）

好直白的钓鱼

【原神新春会】我不曾忘记 | 致旅行中的你

https://www.bilibili.com/video/BV1P24y1a7Lt

前段时间一直在忙，现在有空来补票补个币了，感觉好好听

草，味太浓了

https://www.bilibili.com/video/av439440201

最近有朋友在 Telegram 上遇到被盗用头像/名字/Bio后被伪造一个相同用户的情况，各位读者请注意仔细甄别，特别是留意身边的朋友，有时候可能一下子会没反应过来。

[预警] 闲鱼交易不要扫描任何对方发来的二维码。目前支付宝收货逻辑存在严重业务逻辑漏洞，在最坏情况（开启面容支付）下可以实现受害者 0 click 自动确认收货，导致钱货两空。目前支付宝似乎已对大额交易进行风控，但是小额交易仍需谨慎。

复现