CVE-2017-0164

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 4.4

CVSS2: 3.5

EPSS Низкий

Описание

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."

Ссылки

http://www.securityfocus.com/bid/97448
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038235
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164
Patch
Vendor Advisory
http://www.securityfocus.com/bid/97448
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038235
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05366

Низкий

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2017-0164

CVSS3: 4.4

msrc

около 8 лет назад

Active Directory Denial of Service Vulnerability

GHSA-v9mj-gv7c-j2c8

CVSS3: 4.4

github

около 3 лет назад

EPSS

Процентиль: 90%

0.05366

Низкий

4.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-20