CVE-2017-0004

—

CVSS 3.0

7.5 high

EPSS

91%p100

Published

Jan 10, 2017 (Jan 10, 2017)

Modified

Jun 17, 2026

Description

The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability."

Vendors: microsoft
Products: windows 7, windows server 2008, windows vista
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (91.4%)

In the news2 stories

Microsoft Releases 4 Security Updates — Smallest Patch Tuesday Ever!

The Hacker NewsJan 11, 09:26 UTC · Jan 11, 2017Vulnerability in the wildCVE-2017-0002 CVE-2017-0003 CVE-2017-0004

Microsoft Patch Tuesday

Cisco TalosJan 10, 20:28 UTC · Jan 10, 2017Vulnerability CVE-2017-0003 CVE-2017-0002 CVE-2017-0004