PT-2017-18442 · Microsoft · Windows Subsystem For Linux+1

Publicado 2017-08-08 · Atualizado 2019-10-03 · CVE-2017-8622

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux version 10 1703

Description The issue arises from the Windows Subsystem for Linux failing to properly handle handles to NT pipes, leading to an elevation of privilege. This allows attackers to affect the system.

Recommendations For Windows Subsystem for Linux version 10 1703, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-8622

Produtos afetados

Windows

Windows Subsystem For Linux

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8622 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-8622 · Nota de Segurança
• http://securityfocus.com/bid/100040 · Nota
• http://securitytracker.com/id/1039103 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8622 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8622 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8622 · Aviso do Fabricante