PT-2017-1579 · Microsoft · Windows Server 2016+3

Jonathan Bar Or · Publicado 2017-03-14 · Atualizado 2019-10-03 · CVE-2017-0095

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, and 1607 Windows Server 2016

Description The issue is related to improper validation of vSMB packet data in Hyper-V, allowing attackers to execute arbitrary code on a target OS. It is also described as an operating system vulnerability related to insufficient access control, which can be exploited to execute arbitrary code. Remote attackers can exploit this issue to affect the system.

Recommendations For Microsoft Windows 10 versions Gold, 1511, and 1607: update to a version that includes the fix for this issue. For Windows Server 2016: update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vSMB packet data in Hyper-V to minimize the risk of exploitation.

Correção

RCE

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-20

Identificadores relacionados

BDU:2017-00724

CVE-2017-0095

Produtos afetados

Hyper-V

Windows 10

Windows

Windows Server 2016

Referências · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0095 · Aviso do Fabricante
• http://securitytracker.com/id/1037999 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-0095 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0095 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-0095 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095 · Aviso do Fabricante
• http://securityfocus.com/bid/96699 · Nota
• https://bdu.fstec.ru/vul/2017-00724 · Nota de Segurança