Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-11779
HistoryOct 13, 2017 - 1:29 p.m.

CVE-2017-11779

2017-10-1313:29:00
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.44 Medium

EPSS

Percentile

97.4%

JSON

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka “Windows DNSAPI Remote Code Execution Vulnerability”.

Affected configurations

NVD
Node
microsoftwindows_10Match-
OR
microsoftwindows_10Match1511
OR
microsoftwindows_10Match1607
OR
microsoftwindows_10Match1703
OR
microsoftwindows_8.1
OR
microsoftwindows_rt_8.1
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016

Related

cve 1
myhack58 2
mscve 1
checkpoint_advisories 2
huawei 1
prion 1
cvelist 1
zdi 1
seebug 1
threatpost 2
symantec 1
krebs 1
qualysblog 1
thn 1
mskb 8
openvas 6
nessus 6
kaspersky 1
trendmicroblog 1
talosblog 1
cve
cve
CVE-2017-11779
2017-10-13 13:29:00
myhack58
myhack58
Important vulnerabilities early warning: the Windows DNS client in the broke multiple heap buffer overflow flaws vulnerabilities in bug-bug warning-the black bar safety net
2017-10-12 00:00:00
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
2017-10-12 00:00:00
mscve
mscve
Windows DNSAPI Remote Code Execution Vulnerability
2017-10-10 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779)
2017-10-18 00:00:00
Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779) - Ver2
2018-04-17 00:00:00
huawei
huawei
Security Advisory - Remote Code Execution Vulnerability in Windows DNSAPI
2017-12-20 00:00:00
prion
prion
Remote code execution
2017-10-13 13:29:00
cvelist
cvelist
CVE-2017-11779
2017-10-10 00:00:00
zdi
zdi
Microsoft Windows DNSAPI NSEC3_RecordRead Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-10-10 00:00:00
seebug
seebug
Windows KEPT remote code execution vulnerability analysis(CVE-2017-11779)
2017-10-16 00:00:00
threatpost
threatpost
Microsoft Patches Critical Windows DNS Client Vulnerabilities
2017-10-10 14:00:55
Microsoft Patches Office Bug Actively Being Exploited
2017-10-10 16:44:08
symantec
symantec
Microsoft Windows DNSAPI CVE-2017-11779 Remote Code Execution Vulnerability
2017-10-10 00:00:00
krebs
krebs
Microsoft’s October Patch Batch Fixes 62 Flaws
2017-10-11 14:18:40
qualysblog
qualysblog
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities
2017-10-10 18:23:41
thn
thn
Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack
2017-10-10 22:06:00
mskb
mskb
October 10, 2017—KB4041679 (Security-only update)
2017-10-16 07:00:00
October 10, 2017—KB4041690 (Monthly Rollup)
2017-10-16 07:00:00
October 10, 2017—KB4041687 (Security-only update)
2017-10-16 07:00:00
openvas
openvas
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4041690)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041693)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041689)
2017-10-11 00:00:00
nessus
nessus
Windows Server 2012 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
Windows 8.1 and Windows Server 2012 R2 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
KB4042895: Windows 10 October 2017 Cumulative Update (KRACK)
2017-11-03 00:00:00
kaspersky
kaspersky
KLA11111 Multiple vulnerabilities in Microsoft Windows
2017-10-10 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017
2017-10-13 14:03:59
talosblog
talosblog
Microsoft Patch Tuesday - October 2017
2017-10-10 13:25:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

0.44 Medium

EPSS

Percentile

97.4%

JSON
Related for NVD:CVE-2017-11779
cve1myhack582mscve1checkpoint_advisories2huawei1prion1cvelist1zdi1seebug1threatpost2symantec1krebs1qualysblog1thn1mskb8openvas6nessus6kaspersky1trendmicroblog1talosblog1