MicrosoftKB4025337July 11, 2017—KB4025337 (Security-only update)
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.27 Low
EPSS
Percentile
96.7%
July 11, 2017—KB4025337 (Security-only update)
Improvements and fixes
This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:
-
Security updates to Microsoft Graphics Component, Windows Search, Windows kernel-mode drivers, Windows Virtualization, Windows Server, Windows Storage and File Systems, Datacenter Networking, Windows shell, ASP.NET, Microsoft PowerShell, Windows kernel, and Microsoft NTFS.
For more information about the security vulnerabilities resolved, please refer to the Security Update Guide.More InformationImportant -
After installing the security updates for CVE-2017-8563, administrators need to set registry key LdapEnforceChannelBinding to enable the fix for the CVE. For more information about setting the registry key, see Microsoft Knowledge Base article 4034879.
Known issues in this update
| Symptom | Workaround |
|---|---|
| Due to a defect in WLDAP32.DLL, applications that perform LDAP referral chasing can consume too many dynamic TCP ports (potentially exhausting them) after installing KB4025337 and KB4025341. Applications and roles known to make these referrals may include Outlook.exe, DFSR, and others.If restarting applications that perform LDAP referral chasing returns normal functionality on machines that installed KB 4025337 and KB4025341, you may be experiencing this issue. | To work around the problem, restart services or applications that perform LDAP referral chasing to free TCP dynamic ports. A reboot will also free ports. For example, restarting Outlook will free ports used by that application.To work around the problem for cluster computers hosting the DFSR service, place the virtual cluster object under the Computers container to avoid reaching the referral chasing search, which leads to the dynamic port leak.Microsoft is working on a resolution and will provide an update in an upcoming release. |
| If a machine has more than one monitor connected and the screen numbering is not in sequence, some applications will experience rendering issues. |
- Enable Desktop Composition (needs graphics card support).
- Make sure that the main monitor is on the top left in the monitor layout.
The WordPad application can sometimes crash on launch after installing KB4025337.| Microsoft is working on a resolution and will provide an update in an upcoming release.
How to get this update
To get the standalone package for this update, go to the Microsoft Update Catalog website.File informationFor a list of the files that are provided in this update, download the file information for update 4025337.
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.27 Low
EPSS
Percentile
96.7%