CVE-2017-0171
Windows DNS Server Denial of Service Vulnerability
CVE-2017-0171 is fixed in 12 products on 1 platform, first by KB4019472, released May 9, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.3
Important
Exploitation
None reported
Exploitation Unlikely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0406
90th percentile
<p>A denial of service vulnerability exists in Windows DNS Server if the server is configured to answer version queries. An attacker who successfully exploited this vulnerability could cause the DNS Server service to become nonresponsive.</p> <p>An attacker could exploit this vulnerability by sending malicious DNS queries, resulting in denial of service.</p> <p>The update addresses the vulnerability by correcting how Windows DNS Server processes DNS queries.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4019263 | May 9, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4019264 | May 9, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4019263 | May 9, 2017 | |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | KB4019264 | May 9, 2017 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | KB4018196 | May 9, 2017 | |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | KB4018196 | May 9, 2017 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 | KB4018196 | May 9, 2017 | |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | KB4018196 | May 9, 2017 | |
| Windows Server 2012 | KB4019214 | May 9, 2017 | |
| Windows Server 2012 | KB4019216 | May 9, 2017 | |
| Windows Server 2012 (Server Core installation) | KB4019214 | May 9, 2017 | |
| Windows Server 2012 (Server Core installation) | KB4019216 | May 9, 2017 | |
| Windows Server 2012 R2 | KB4019213 | May 9, 2017 | |
| Windows Server 2012 R2 | KB4019215 | May 9, 2017 | |
| Windows Server 2012 R2 (Server Core installation) | KB4019213 | May 9, 2017 | |
| Windows Server 2012 R2 (Server Core installation) | KB4019215 | May 9, 2017 | |
| Windows Server 2016 | 14393.1198 | KB4019472 | May 9, 2017 |
| Windows Server 2016 (Server Core installation) | 14393.1198 | KB4019472 | May 9, 2017 |