PT-2017-1648 · Microsoft · Windows Server 2012 R2+5

Published 2017-03-14 · Updated 2017-07-25 · CVE-2017-0016

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 Gold, 1511, and 1607 Microsoft Windows 8.1 Microsoft Windows RT 8.1 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016

Description The issue is related to the improper handling of certain requests in SMBv2 and SMBv3 packets by the Server service, which can be exploited by remote attackers to execute arbitrary code via a crafted packet. This is also described as a null dereference denial of service vulnerability. The vulnerability is associated with pointer dereference errors in the Windows operating system's server service. Exploitation of the vulnerability could allow a remote attacker to access local files using specially crafted SMBv2 or SMBv3 packets.

Recommendations For Microsoft Windows 10 Gold, 1511, and 1607, update the system to address the issue. For Microsoft Windows 8.1, apply the recommended patch to fix the vulnerability. For Microsoft Windows RT 8.1, install the latest security update to resolve the issue. For Microsoft Windows Server 2012 R2, apply the necessary security patch to mitigate the risk. For Microsoft Windows Server 2016, update the system with the latest available patch to fix the vulnerability. As a temporary workaround, consider restricting access to the Server service to minimize the risk of exploitation.

Fix

RCE

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2017-00801

CVE-2017-0016

Affected Products

Windows

Windows 10

Windows 8.1

Windows Rt 8.1

Windows Server 2012 R2

Windows Server 2016

References · 9

• https://osv.dev/vulnerability/CVE-2017-0016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0016 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0016 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0016 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0016 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00801 · Security Note
• http://securitytracker.com/id/1037767 · Note
• http://securityfocus.com/bid/95969 · Note
• http://securitytracker.com/id/1038001 · Note