CVE-2017-0016

—

CVSS 3.0

5.9 medium

EPSS

26%p98

Published

Mar 17, 2017 (Mar 17, 2017)

Modified

Jun 17, 2026

Description

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability."

Vendors: microsoft
Products: windows 10, windows 8.1, windows rt 8.1, windows server 2012, windows server 2016
Weakness: CWE-476
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (25.7%)

In the news0 stories

No ingested article mentions this CVE yet.