What is the severity of CVE-2017-0296?

CVE-2017-0296 has a critical severity rating as it allows an attacker to elevate privileges.

How do I fix CVE-2017-0296?

To fix CVE-2017-0296, users should apply the latest security updates provided by Microsoft for their affected Windows systems.

Which systems are affected by CVE-2017-0296?

CVE-2017-0296 affects multiple Microsoft Windows versions including Windows 7 SP1, Windows 8.1, Windows 10, and Windows Server versions.

What type of vulnerability is CVE-2017-0296?

CVE-2017-0296 is a privilege escalation vulnerability caused by improper handling of buffer lengths in the tdx.sys system driver.

Can CVE-2017-0296 be exploited remotely?

CVE-2017-0296 requires local access to the system to exploit, so it cannot be directly exploited remotely.

Vulnerability/
CVE-2017-0296

high

7.8

CWE

120

15/6/2017

5/8/2024

CVE-2017-0296

First published: Thu Jun 15 2017(Updated: )

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows TDX Elevation of Privilege Vulnerability".

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Windows 10
Microsoft Windows 10	=1511
Microsoft Windows 10	=1607
Microsoft Windows 10	=1703
Microsoft Windows 7	=sp1
Microsoft Windows 8.1
Microsoft Windows 8.1	=rt
Microsoft Windows Server 2008 Itanium	=r2
Microsoft Windows Server 2008 Itanium	=r2-sp1
Microsoft Windows Server 2012 x64
Microsoft Windows Server 2012 x64	=r2
Microsoft Windows Server 2016

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0296

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-0296?
CVE-2017-0296 has a critical severity rating as it allows an attacker to elevate privileges.
How do I fix CVE-2017-0296?
To fix CVE-2017-0296, users should apply the latest security updates provided by Microsoft for their affected Windows systems.
Which systems are affected by CVE-2017-0296?
CVE-2017-0296 affects multiple Microsoft Windows versions including Windows 7 SP1, Windows 8.1, Windows 10, and Windows Server versions.
What type of vulnerability is CVE-2017-0296?
CVE-2017-0296 is a privilege escalation vulnerability caused by improper handling of buffer lengths in the tdx.sys system driver.
Can CVE-2017-0296 be exploited remotely?
CVE-2017-0296 requires local access to the system to exploit, so it cannot be directly exploited remotely.

agent/references
agent/type
agent/weakness
agent/author
agent/remedy
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft windows 10
version/microsoft windows 10/1511
version/microsoft windows 10/1607
version/microsoft windows 10/1703
canonical/microsoft windows 7
version/microsoft windows 7/sp1
canonical/microsoft windows 8.1
version/microsoft windows 8.1/rt
canonical/microsoft windows server 2008 itanium
version/microsoft windows server 2008 itanium/r2
version/microsoft windows server 2008 itanium/r2-sp1
canonical/microsoft windows server 2012 x64
version/microsoft windows server 2012 x64/r2
canonical/microsoft windows server 2016

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2017-0296?
CVE-2017-0296 has a critical severity rating as it allows an attacker to elevate privileges.
How do I fix CVE-2017-0296?
To fix CVE-2017-0296, users should apply the latest security updates provided by Microsoft for their affected Windows systems.
Which systems are affected by CVE-2017-0296?
CVE-2017-0296 affects multiple Microsoft Windows versions including Windows 7 SP1, Windows 8.1, Windows 10, and Windows Server versions.
What type of vulnerability is CVE-2017-0296?
CVE-2017-0296 is a privilege escalation vulnerability caused by improper handling of buffer lengths in the tdx.sys system driver.
Can CVE-2017-0296 be exploited remotely?
CVE-2017-0296 requires local access to the system to exploit, so it cannot be directly exploited remotely.