Home

CVE-2017-0057

Description

DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails to properly process DNS queries, which allows remote attackers to obtain sensitive information via (1) convincing a workstation user to visit an untrusted webpage or (2) tricking a server into sending a DNS query to a malicious DNS server, aka Windows DNS Query Information Disclosure Vulnerability.

Risk Information

Base Score
3.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
31.132

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Browser Spoofing Vulnerability for Windows Server 2016 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 for x64-based Systems (KB4012606) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4013198) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 (KB4013198) - CumulativeWindows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard for x64-based Systems (KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard (KB4012214)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB4012021)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Server 2008 (KB4012021)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Server 2008 for x64-based Systems (KB3217587)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Server 2008 (KB3217587)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Vista for x64-based Systems (KB3217587)Windows
Windows DNS Query Information Disclosure Vulnerability for Windows Vista (KB3217587)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 (KB4012606)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-22054Cumulative Update for Windows Server 2016 for x64-based Systems (KB4013429)
PATCH-22053Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4013429)
PATCH-22052Cumulative Update for Windows 10 Version 1607 (KB4013429)
PATCH-22049Cumulative Update for Windows 10 for x64-based Systems (KB4012606)
PATCH-22149March, 2017 Security Monthly Quality Rollup for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)
PATCH-22148March, 2017 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22047March, 2017 Security Monthly Quality Rollup for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22063March, 2017 Security Only Quality Update for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22062March, 2017 Security Only Quality Update for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22064March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22051Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4013198)
PATCH-22050Cumulative Update for Windows 10 Version 1511 (KB4013198)
PATCH-22066March, 2017 Security Only Quality Update for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22065March, 2017 Security Only Quality Update for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22067March, 2017 Security Only Quality Update for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)
PATCH-22070March, 2017 Security Only Quality Update for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)
PATCH-22081Security Update for Windows Server 2008 for x64-based Systems (KB4012021)
PATCH-22080Security Update for Windows Server 2008 (KB4012021)
PATCH-22079Security Update for Windows Server 2008 for x64-based Systems (KB3217587)
PATCH-22077Security Update for Windows Server 2008 (KB3217587)
PATCH-22078Security Update for Windows Vista for x64-based Systems (KB3217587)
PATCH-22076Security Update for Windows Vista (KB3217587)
PATCH-22048Cumulative Update for Windows 10 (KB4012606)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234