Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2017-8622

Опубликовано: 08 авг. 2017
Источник: msrc
CVSS3: 7
EPSS Низкий

Описание

Windows Subsystem for Linux Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles NT pipes. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.

The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles NT pipes.

Обновления

ПродуктСтатьяОбновление
Windows 10 Version 1703 for x64-based Systems

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Unlikely

Older Software Release

N/A

DOS

N/A

EPSS

Процентиль: 77%
0.01092
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
почти 8 лет назад

Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".

CVSS3: 7.8
github
около 3 лет назад

Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".

EPSS

Процентиль: 77%
0.01092
Низкий

7 High

CVSS3