CVE-2017-0171

Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016 are configured to answer version queries, aka "Windows DNS Server Denial of Service Vulnerability".

Score

CVSS 3.0 5.9 Medium

Status

Modified - secure@microsoft.com

Published

2017-05-12

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Windows Server 2008 (Microsoft)
• Windows Server 2012 (Microsoft)
• Windows Server 2016 (Microsoft)
• Windows Dns Server (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/98097
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0171