First published: Tue Jan 10 2017(Updated: )
The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service (reboot) via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of Service Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 7 | =sp1 | |
Microsoft Windows Server | =sp2 | |
Microsoft Windows Server | =r2-sp1 | |
Microsoft Windows Vista | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0004 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To mitigate CVE-2017-0004, apply the relevant security patches and updates provided by Microsoft.
CVE-2017-0004 affects Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, and Windows 7 SP1.
The impact of CVE-2017-0004 is that remote attackers can exploit the vulnerability to cause a system reboot.
Currently, the best workaround for CVE-2017-0004 is to ensure all affected systems are fully updated with the latest security patches.