QwikSec

Security Database

CVE

CWE

Training

CVE-2017-0021

Published: Mar 17, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V System Data Structure Vulnerability." This vulnerability is different from that described in CVE-2017-0095.

Vendor	Product	Versions
Microsoft Corporation	Hyper-V vSMB	affected `Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016`

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0021

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.