CVEvulnerability
CVE-2017-0164
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-04-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.4 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."
Affected configurations
• microsoft windows 10 1607
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/97448 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038235 www.securitytracker.com
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/97448 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038235 www.securitytracker.com
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0164 Patch, Vendor Advisory