CVE-2017-0271

Windows SMB Information Disclosure Vulnerability

CVE-2017-0271 is fixed in 27 products on 1 platform, first by KB4019473, released May 9, 2017. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.0
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1327
96th percentile

<p>An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p> <p>To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1511 for x64-based Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1607 for 32-bit Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1607 for x64-based Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1703 for 32-bit Systems KB4016871 May 9, 2017
Windows 10 Version 1703 for x64-based Systems KB4016871 May 9, 2017
Windows 10 for 32-bit Systems 10240.17394 KB4019474 May 9, 2017
Windows 10 for x64-based Systems 10240.17394 KB4019474 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019264 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows 8.1 for 32-bit systems KB4019213 May 9, 2017
Windows 8.1 for 32-bit systems KB4019215 May 9, 2017
Windows 8.1 for x64-based systems KB4019213 May 9, 2017
Windows 8.1 for x64-based systems KB4019215 May 9, 2017
Windows RT 8.1 KB4019215 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019264 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2012 KB4019214 May 9, 2017
Windows Server 2012 KB4019216 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019214 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019216 May 9, 2017
Windows Server 2012 R2 KB4019213 May 9, 2017
Windows Server 2012 R2 KB4019215 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019213 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019215 May 9, 2017
Windows Server 2016 14393.1198 KB4019472 May 9, 2017
Windows Server 2016 (Server Core installation) 14393.1198 KB4019472 May 9, 2017