Improper input validation in Microsoft Windows and Windows Server - CVE-2017-0004

Vulnerability details

The vulnerability allows a remote attacker to cause denial of service conditions.

The vulnerability exists due to the way the Local Security Authority Subsystem Service (LSASS) handles authentication requests. A remote unauthenticated attacker can send a specially crafted authentication request to vulnerable system and trigger its automatic reboot.

Successful exploitation of the vulnerability will result in denial of service attack.

Affected software

How to mitigate CVE-2017-0004

External References

• https://technet.microsoft.com/en-us/library/security/ms17-004.asp
• https://support.microsoft.com/en-us/kb/3216771

Related Security Bulletins

• Denial of service in LSASS in Microsoft Windows
• Local Security Authority Subsystem Service Denial of Service Vulnerability