Lucene search

K
mskbMicrosoftKB4018466
HistoryMay 09, 2017 - 7:00 a.m.

Security update for the Windows SMB Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

2017-05-0907:00:00
Microsoft
support.microsoft.com
19

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.263 Low

EPSS

Percentile

96.7%

Security update for the Windows SMB Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Summary

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploits this vulnerability could craft a special packet. This could cause an information disclosure from the server.

To learn more about the vulnerability, go to the Security Update Guide.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: May 9, 2017

More Information

__

How to obtain help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4018466-ia64.msu C3F75846826AD3992FBC2D7A8C57A85F7F0A397C 38D980BA623A0AD5695DB70F6CA0B49A9A1069EE304DCF1FF4F4411823EBC0C7
Windows6.0-KB4018466-x64.msu 716403222008343DAD1A9964E1C45787E51A8792 5DF45753B06958D0DA1FE1E4DF6C74A504D0BA23E5FE005A09DBDA07D18CB448
Windows6.0-KB4018466-x86.msu 33843FD20FDD7D88A77C6AC5BA02145641EDE966 FBC2257442A6ED0351FB677F93A8FB71A2C2BD64B73D23F63D7668D1440D760A

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

__

For all supported ia64-based versions

File name File version File size Date Time Platform
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 16:57 Not applicable
Netevent.dll.mui 6.0.6002.19673 230,912 03-Aug-2016 15:36 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,848 03-Aug-2016 17:01 Not applicable
Netevent.dll.mui 6.0.6002.19673 144,384 03-Aug-2016 16:49 Not applicable
Netevent.dll.mui 6.0.6002.19673 137,216 03-Aug-2016 17:04 Not applicable
Netevent.dll.mui 6.0.6002.19673 99,840 03-Aug-2016 17:00 Not applicable
Netevent.dll.mui 6.0.6002.19673 101,376 03-Aug-2016 16:55 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:51 Not applicable
Netevent.dll.mui 6.0.6002.24089 230,912 07-Apr-2017 15:22 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,848 07-Apr-2017 16:42 Not applicable
Netevent.dll.mui 6.0.6002.24089 144,384 07-Apr-2017 16:54 Not applicable
Netevent.dll.mui 6.0.6002.24089 137,216 07-Apr-2017 16:49 Not applicable
Netevent.dll.mui 6.0.6002.24089 99,840 07-Apr-2017 16:53 Not applicable
Netevent.dll.mui 6.0.6002.24089 101,376 07-Apr-2017 16:45 Not applicable
Netevent.dll 6.0.6002.19673 17,920 03-Aug-2016 15:35 IA-64
Netevent.dll 6.0.6002.24089 17,920 07-Apr-2017 15:17 IA-64
Srvnet.sys 6.0.6002.19673 297,984 03-Aug-2016 14:20 IA-64
Srvnet.sys 6.0.6002.24089 297,984 07-Apr-2017 14:21 IA-64
Srv.sys 6.0.6002.19765 967,168 07-Apr-2017 14:21 IA-64
Srv.sys 6.0.6002.24089 969,216 07-Apr-2017 14:22 IA-64
Srv2.sys 6.0.6002.19765 468,480 07-Apr-2017 14:21 IA-64
Srv2.sys 6.0.6002.24089 474,624 07-Apr-2017 14:21 IA-64
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:20 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 15:44 Not applicable
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:19 Not applicable
Netevent.dll.mui 6.0.6002.19673 155,648 03-Aug-2016 16:38 Not applicable
Netevent.dll.mui 6.0.6002.19673 147,456 03-Aug-2016 16:31 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:39 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:27 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:20 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 15:26 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 155,648 07-Apr-2017 16:34 Not applicable
Netevent.dll.mui 6.0.6002.24089 147,456 07-Apr-2017 16:25 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:38 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:33 Not applicable
Netevent.dll 6.0.6002.19673 17,920 03-Aug-2016 15:45 x86
Netevent.dll 6.0.6002.24089 17,920 07-Apr-2017 15:24 x86

__

For all supported x64-based versions

File name File version File size Date Time Platform
Netevent.dll.mui 6.0.6002.19673 233,984 03-Aug-2016 17:08 Not applicable
Netevent.dll.mui 6.0.6002.19673 239,104 03-Aug-2016 17:08 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 17:06 Not applicable
Netevent.dll.mui 6.0.6002.19673 289,792 03-Aug-2016 17:03 Not applicable
Netevent.dll.mui 6.0.6002.19673 230,912 03-Aug-2016 16:23 Not applicable
Netevent.dll.mui 6.0.6002.19673 263,168 03-Aug-2016 17:04 Not applicable
Netevent.dll.mui 6.0.6002.19673 229,376 03-Aug-2016 17:05 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,848 03-Aug-2016 17:08 Not applicable
Netevent.dll.mui 6.0.6002.19673 253,440 03-Aug-2016 17:10 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 17:11 Not applicable
Netevent.dll.mui 6.0.6002.19673 144,384 03-Aug-2016 17:15 Not applicable
Netevent.dll.mui 6.0.6002.19673 137,216 03-Aug-2016 17:07 Not applicable
Netevent.dll.mui 6.0.6002.19673 229,376 03-Aug-2016 17:16 Not applicable
Netevent.dll.mui 6.0.6002.19673 253,952 03-Aug-2016 17:09 Not applicable
Netevent.dll.mui 6.0.6002.19673 248,320 03-Aug-2016 17:02 Not applicable
Netevent.dll.mui 6.0.6002.19673 253,440 03-Aug-2016 17:09 Not applicable
Netevent.dll.mui 6.0.6002.19673 261,120 03-Aug-2016 17:12 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,152 03-Aug-2016 17:11 Not applicable
Netevent.dll.mui 6.0.6002.19673 231,936 03-Aug-2016 17:10 Not applicable
Netevent.dll.mui 6.0.6002.19673 230,912 03-Aug-2016 17:12 Not applicable
Netevent.dll.mui 6.0.6002.19673 99,840 03-Aug-2016 17:08 Not applicable
Netevent.dll.mui 6.0.6002.19673 101,376 03-Aug-2016 17:12 Not applicable
Netevent.dll.mui 6.0.6002.24089 233,984 07-Apr-2017 16:47 Not applicable
Netevent.dll.mui 6.0.6002.24089 239,104 07-Apr-2017 16:47 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:55 Not applicable
Netevent.dll.mui 6.0.6002.24089 289,792 07-Apr-2017 16:56 Not applicable
Netevent.dll.mui 6.0.6002.24089 230,912 07-Apr-2017 15:45 Not applicable
Netevent.dll.mui 6.0.6002.24089 263,168 07-Apr-2017 16:58 Not applicable
Netevent.dll.mui 6.0.6002.24089 229,376 07-Apr-2017 16:56 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,848 07-Apr-2017 16:47 Not applicable
Netevent.dll.mui 6.0.6002.24089 253,440 07-Apr-2017 16:49 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 17:02 Not applicable
Netevent.dll.mui 6.0.6002.24089 144,384 07-Apr-2017 17:01 Not applicable
Netevent.dll.mui 6.0.6002.24089 137,216 07-Apr-2017 16:53 Not applicable
Netevent.dll.mui 6.0.6002.24089 229,376 07-Apr-2017 17:01 Not applicable
Netevent.dll.mui 6.0.6002.24089 253,952 07-Apr-2017 17:01 Not applicable
Netevent.dll.mui 6.0.6002.24089 248,320 07-Apr-2017 16:48 Not applicable
Netevent.dll.mui 6.0.6002.24089 253,440 07-Apr-2017 16:56 Not applicable
Netevent.dll.mui 6.0.6002.24089 261,120 07-Apr-2017 16:58 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,152 07-Apr-2017 16:55 Not applicable
Netevent.dll.mui 6.0.6002.24089 231,936 07-Apr-2017 16:55 Not applicable
Netevent.dll.mui 6.0.6002.24089 230,912 07-Apr-2017 16:57 Not applicable
Netevent.dll.mui 6.0.6002.24089 99,840 07-Apr-2017 16:52 Not applicable
Netevent.dll.mui 6.0.6002.24089 101,376 07-Apr-2017 16:53 Not applicable
Netevent.dll 6.0.6002.19673 17,920 03-Aug-2016 16:23 x64
Netevent.dll 6.0.6002.24089 17,920 07-Apr-2017 15:43 x64
Srvnet.sys 6.0.6002.19673 147,456 03-Aug-2016 14:40 x64
Srvnet.sys 6.0.6002.24089 147,968 07-Apr-2017 14:42 x64
Srv.sys 6.0.6002.19765 446,464 07-Apr-2017 14:43 x64
Srv.sys 6.0.6002.24089 445,440 07-Apr-2017 14:42 x64
Srv2.sys 6.0.6002.19765 176,128 07-Apr-2017 14:42 x64
Srv2.sys 6.0.6002.24089 178,176 07-Apr-2017 14:42 x64
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:22 Not applicable
Netevent.dll.mui 6.0.6002.19673 249,856 03-Aug-2016 16:21 Not applicable
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:20 Not applicable
Netevent.dll.mui 6.0.6002.19673 299,008 03-Aug-2016 16:28 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 15:44 Not applicable
Netevent.dll.mui 6.0.6002.19673 274,432 03-Aug-2016 16:19 Not applicable
Netevent.dll.mui 6.0.6002.19673 237,568 03-Aug-2016 16:29 Not applicable
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:19 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:33 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 155,648 03-Aug-2016 16:38 Not applicable
Netevent.dll.mui 6.0.6002.19673 147,456 03-Aug-2016 16:31 Not applicable
Netevent.dll.mui 6.0.6002.19673 237,568 03-Aug-2016 16:27 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:39 Not applicable
Netevent.dll.mui 6.0.6002.19673 258,048 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 16:32 Not applicable
Netevent.dll.mui 6.0.6002.19673 249,856 03-Aug-2016 16:33 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:35 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:35 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:39 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:27 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:38 Not applicable
Netevent.dll.mui 6.0.6002.24089 249,856 07-Apr-2017 16:22 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:20 Not applicable
Netevent.dll.mui 6.0.6002.24089 299,008 07-Apr-2017 16:19 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 15:26 Not applicable
Netevent.dll.mui 6.0.6002.24089 274,432 07-Apr-2017 16:36 Not applicable
Netevent.dll.mui 6.0.6002.24089 237,568 07-Apr-2017 16:34 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:29 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:30 Not applicable
Netevent.dll.mui 6.0.6002.24089 155,648 07-Apr-2017 16:34 Not applicable
Netevent.dll.mui 6.0.6002.24089 147,456 07-Apr-2017 16:25 Not applicable
Netevent.dll.mui 6.0.6002.24089 237,568 07-Apr-2017 16:21 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 258,048 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:44 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:42 Not applicable
Netevent.dll.mui 6.0.6002.24089 249,856 07-Apr-2017 16:39 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:30 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:22 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:38 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:33 Not applicable
Netevent.dll 6.0.6002.19673 17,920 03-Aug-2016 15:45 x86
Netevent.dll 6.0.6002.24089 17,920 07-Apr-2017 15:24 x86

__

For all supported x86-based versions

File name File version File size Date Time Platform
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:22 Not applicable
Netevent.dll.mui 6.0.6002.19673 249,856 03-Aug-2016 16:21 Not applicable
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:20 Not applicable
Netevent.dll.mui 6.0.6002.19673 299,008 03-Aug-2016 16:28 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 15:44 Not applicable
Netevent.dll.mui 6.0.6002.19673 274,432 03-Aug-2016 16:19 Not applicable
Netevent.dll.mui 6.0.6002.19673 237,568 03-Aug-2016 16:29 Not applicable
Netevent.dll.mui 6.0.6002.19673 278,528 03-Aug-2016 16:19 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:33 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 155,648 03-Aug-2016 16:38 Not applicable
Netevent.dll.mui 6.0.6002.19673 147,456 03-Aug-2016 16:31 Not applicable
Netevent.dll.mui 6.0.6002.19673 237,568 03-Aug-2016 16:27 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:39 Not applicable
Netevent.dll.mui 6.0.6002.19673 258,048 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 262,144 03-Aug-2016 16:40 Not applicable
Netevent.dll.mui 6.0.6002.19673 270,336 03-Aug-2016 16:32 Not applicable
Netevent.dll.mui 6.0.6002.19673 249,856 03-Aug-2016 16:33 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:35 Not applicable
Netevent.dll.mui 6.0.6002.19673 241,664 03-Aug-2016 16:35 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:39 Not applicable
Netevent.dll.mui 6.0.6002.19673 110,592 03-Aug-2016 16:27 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:38 Not applicable
Netevent.dll.mui 6.0.6002.24089 249,856 07-Apr-2017 16:22 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:20 Not applicable
Netevent.dll.mui 6.0.6002.24089 299,008 07-Apr-2017 16:19 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 15:26 Not applicable
Netevent.dll.mui 6.0.6002.24089 274,432 07-Apr-2017 16:36 Not applicable
Netevent.dll.mui 6.0.6002.24089 237,568 07-Apr-2017 16:34 Not applicable
Netevent.dll.mui 6.0.6002.24089 278,528 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:29 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:30 Not applicable
Netevent.dll.mui 6.0.6002.24089 155,648 07-Apr-2017 16:34 Not applicable
Netevent.dll.mui 6.0.6002.24089 147,456 07-Apr-2017 16:25 Not applicable
Netevent.dll.mui 6.0.6002.24089 237,568 07-Apr-2017 16:21 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 258,048 07-Apr-2017 16:35 Not applicable
Netevent.dll.mui 6.0.6002.24089 262,144 07-Apr-2017 16:44 Not applicable
Netevent.dll.mui 6.0.6002.24089 270,336 07-Apr-2017 16:42 Not applicable
Netevent.dll.mui 6.0.6002.24089 249,856 07-Apr-2017 16:39 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:30 Not applicable
Netevent.dll.mui 6.0.6002.24089 241,664 07-Apr-2017 16:22 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:38 Not applicable
Netevent.dll.mui 6.0.6002.24089 110,592 07-Apr-2017 16:33 Not applicable
Netevent.dll 6.0.6002.19673 17,920 03-Aug-2016 15:45 x86
Netevent.dll 6.0.6002.24089 17,920 07-Apr-2017 15:24 x86
Srvnet.sys 6.0.6002.19673 103,936 03-Aug-2016 14:20 x86
Srvnet.sys 6.0.6002.24089 103,936 07-Apr-2017 14:22 x86
Srv.sys 6.0.6002.19765 305,152 07-Apr-2017 14:19 x86
Srv.sys 6.0.6002.24089 305,152 07-Apr-2017 14:22 x86
Srv2.sys 6.0.6002.19765 146,432 07-Apr-2017 14:19 x86
Srv2.sys 6.0.6002.24089 148,480 07-Apr-2017 14:22 x86

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

5.8 Medium

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.263 Low

EPSS

Percentile

96.7%