PT-2017-18483 · Microsoft · Windows Subsystem For Linux+2

Noam Kushinsky + 1 · Published 2017-10-10 · Updated 2017-10-27 · CVE-2017-8703

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Subsystem for Linux on Microsoft Windows 10 version 1703

Description The issue arises from improper handling of objects in memory, leading to a denial of service. This allows attackers to affect the system.

Recommendations For Microsoft Windows 10 version 1703, update to a newer version that includes the fix for this issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-8703

Affected Products

Windows Subsystem For Linux

Windows

Windows 10

References · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8703 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8703 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8703 · Vendor Advisory
• http://securityfocus.com/bid/101164 · Note
• http://securitytracker.com/id/1039534 · Note