PT-2017-1579 · Microsoft · Windows Server 2016+3

Jonathan Bar Or · Published 2017-03-14 · Updated 2019-10-03 · CVE-2017-0095

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, and 1607 Windows Server 2016

Description The issue is related to improper validation of vSMB packet data in Hyper-V, allowing attackers to execute arbitrary code on a target OS. It is also described as an operating system vulnerability related to insufficient access control, which can be exploited to execute arbitrary code. Remote attackers can exploit this issue to affect the system.

Recommendations For Microsoft Windows 10 versions Gold, 1511, and 1607: update to a version that includes the fix for this issue. For Windows Server 2016: update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the vSMB packet data in Hyper-V to minimize the risk of exploitation.

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-284

CWE-20

Related Identifiers

BDU:2017-00724

CVE-2017-0095

Affected Products

Hyper-V

Windows 10

Windows

Windows Server 2016

References · 8

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0095 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0095 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0095 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0095 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00724 · Security Note
• http://securitytracker.com/id/1037999 · Note
• http://securityfocus.com/bid/96699 · Note