CVE-2017-0280

Windows SMB Denial of Service Vulnerability

CVE-2017-0280 is fixed in 27 products on 1 platform, first by KB4019473, released May 9, 2017. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.0
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0717
94th percentile

<p>A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server. An attacker who exploited this vulnerability could cause the affected system to stop responding until it is manually restarted. To attempt to exploit this issue, an attacker would need to send specially crafted SMB requests to the target system.</p> <p>Note that the denial of service vulnerability would not allow an attacker to execute code or to elevate their user rights, but it could cause the affected system to stop accepting requests.</p> <p>The security update addresses the vulnerability by correcting the manner in which SMB handles specially crafted client requests.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Windows 10 Version 1511 for 32-bit Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1511 for x64-based Systems 10586.916 KB4019473 May 9, 2017
Windows 10 Version 1607 for 32-bit Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1607 for x64-based Systems 14393.1198 KB4019472 May 9, 2017
Windows 10 Version 1703 for 32-bit Systems KB4016871 May 9, 2017
Windows 10 Version 1703 for x64-based Systems KB4016871 May 9, 2017
Windows 10 for 32-bit Systems 10240.17394 KB4019474 May 9, 2017
Windows 10 for x64-based Systems 10240.17394 KB4019474 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for 32-bit Systems Service Pack 1 KB4019264 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows 7 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows 8.1 for 32-bit systems KB4019213 May 9, 2017
Windows 8.1 for 32-bit systems KB4019215 May 9, 2017
Windows 8.1 for x64-based systems KB4019213 May 9, 2017
Windows 8.1 for x64-based systems KB4019215 May 9, 2017
Windows RT 8.1 KB4019215 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 KB4019264 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019263 May 9, 2017
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) KB4019264 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2008 for Itanium-Based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 KB4018466 May 9, 2017
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) KB4018466 May 9, 2017
Windows Server 2012 KB4019214 May 9, 2017
Windows Server 2012 KB4019216 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019214 May 9, 2017
Windows Server 2012 (Server Core installation) KB4019216 May 9, 2017
Windows Server 2012 R2 KB4019213 May 9, 2017
Windows Server 2012 R2 KB4019215 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019213 May 9, 2017
Windows Server 2012 R2 (Server Core installation) KB4019215 May 9, 2017
Windows Server 2016 14393.1198 KB4019472 May 9, 2017
Windows Server 2016 (Server Core installation) 14393.1198 KB4019472 May 9, 2017