W - SMB - DOS Authenticated

ID MS:CVE-2017-11781
Type mscve
Reporter Microsoft
Modified 2017-10-10T07:00:00


A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an authenticated attacker sends specially crafted requests to the server. An attacker who exploited this vulnerability could cause the affected system to crash. To attempt to exploit this issue, an attacker would need to send specially crafted SMB requests to the target system.

Note that the denial of service vulnerability would not allow an attacker to execute code or to elevate their user rights, but it could cause the affected system to stop accepting requests.

The security update addresses the vulnerability by correcting the manner in which SMB handles specially crafted client requests.