Lucene search

MicrosoftCVE-2017-8622

HistoryAug 08, 2017 - 9:29 p.m.

CVE-2017-8622

2017-08-0821:29:00

microsoft

web.nvd.nist.gov

cve-2017-8622

windows subsystem for linux

elevation of privilege

windows 10 1703

nt pipes

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.001

Percentile

37.3%

JSON

Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka “Windows Subsystem for Linux Elevation of Privilege Vulnerability”.

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10Match1703

VendorProductVersionCPE
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*

CNA Affected

[
  {
    "product": "Windows Subsystem for Linux",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Windows 10 1703"
      }
    ]
  }
]