Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-11779
HistoryOct 13, 2017 - 1:29 p.m.

CVE-2017-11779

2017-10-1313:29:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
49
microsoft
windows
dns
dnsapi.dll
remote code execution
vulnerability
cve-2017-11779
nvd

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.449 Medium

EPSS

Percentile

97.4%

JSON

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka “Windows DNSAPI Remote Code Execution Vulnerability”.

VendorProductVersionCPE
f5big-ip_domain_name_system*cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*

Related

myhack58 2
checkpoint_advisories 2
mscve 1
huawei 1
prion 1
zdi 1
seebug 1
symantec 1
threatpost 2
krebs 1
qualysblog 1
thn 1
mskb 8
openvas 6
nessus 6
kaspersky 1
trendmicroblog 1
talosblog 1
myhack58
myhack58
Important vulnerabilities early warning: the Windows DNS client in the broke multiple heap buffer overflow flaws vulnerabilities in bug-bug warning-the black bar safety net
2017-10-12 00:00:00
Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net
2017-10-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779)
2017-10-18 00:00:00
Microsoft Windows DNSAPI NSEC3 Heap-based Buffer Overflow (CVE-2017-11779) - Ver2
2018-04-17 00:00:00
mscve
mscve
Windows DNSAPI Remote Code Execution Vulnerability
2017-10-10 07:00:00
huawei
huawei
Security Advisory - Remote Code Execution Vulnerability in Windows DNSAPI
2017-12-20 00:00:00
prion
prion
Remote code execution
2017-10-13 13:29:00
zdi
zdi
Microsoft Windows DNSAPI NSEC3_RecordRead Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-10-10 00:00:00
seebug
seebug
Windows KEPT remote code execution vulnerability analysis(CVE-2017-11779)
2017-10-16 00:00:00
symantec
symantec
Microsoft Windows DNSAPI CVE-2017-11779 Remote Code Execution Vulnerability
2017-10-10 00:00:00
threatpost
threatpost
Microsoft Patches Critical Windows DNS Client Vulnerabilities
2017-10-10 14:00:55
Microsoft Patches Office Bug Actively Being Exploited
2017-10-10 16:44:08
krebs
krebs
Microsoft’s October Patch Batch Fixes 62 Flaws
2017-10-11 14:18:40
qualysblog
qualysblog
October Patch Tuesday: 28 Critical Microsoft Vulnerabilities
2017-10-10 18:23:41
thn
thn
Microsoft Issues Patches For Severe Flaws, Including Office Zero-Day & DNS Attack
2017-10-10 22:06:00
mskb
mskb
October 10, 2017—KB4041679 (Security-only update)
2017-10-16 07:00:00
October 10, 2017—KB4041687 (Security-only update)
2017-10-16 07:00:00
October 10, 2017—KB4041690 (Monthly Rollup)
2017-10-16 07:00:00
openvas
openvas
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4041690)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041693)
2017-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4041689)
2017-10-11 00:00:00
nessus
nessus
Windows Server 2012 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
Windows 8.1 and Windows Server 2012 R2 October 2017 Security Updates (KRACK)
2017-10-10 00:00:00
KB4041691: Windows 10 Version 1607 and Windows Server 2016 October 2017 Cumulative Update (KRACK)
2017-10-10 00:00:00
kaspersky
kaspersky
KLA11111 Multiple vulnerabilities in Microsoft Windows
2017-10-10 00:00:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017
2017-10-13 14:03:59
talosblog
talosblog
Microsoft Patch Tuesday - October 2017
2017-10-10 13:25:00

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.449 Medium

EPSS

Percentile

97.4%

JSON
Related for CVE-2017-11779
myhack582checkpoint_advisories2mscve1huawei1prion1zdi1seebug1symantec1threatpost2krebs1qualysblog1thn1mskb8openvas6nessus6kaspersky1trendmicroblog1talosblog1