PT-2017-18442 · Microsoft · Windows Subsystem For Linux+1

Published 2017-08-08 · Updated 2019-10-03 · CVE-2017-8622

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux version 10 1703

Description The issue arises from the Windows Subsystem for Linux failing to properly handle handles to NT pipes, leading to an elevation of privilege. This allows attackers to affect the system.

Recommendations For Windows Subsystem for Linux version 10 1703, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-8622

Affected Products

Windows

Windows Subsystem For Linux

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8622 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-8622 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8622 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-8622 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8622 · Vendor Advisory
• http://securityfocus.com/bid/100040 · Note
• http://securitytracker.com/id/1039103 · Note