Local Security Authority Subsystem Service Denial of Service Vulnerability in Microsoft Windows
CVE-2016-7237

6.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Windows Rt 8.1
Windows Server 2012
Windows Server 2016
Windows 7
Vendor
CVE Published:
10 November 2016

What is CVE-2016-7237?

The Local Security Authority Subsystem Service (LSASS) in various Microsoft Windows operating systems is prone to a denial of service vulnerability. This flaw permits remote authenticated users to send specially crafted requests that can lead to the system hanging, resulting in a denial of service. Affected systems include several versions of Windows from Vista to Windows Server 2016, highlighting the importance of applying timely security updates to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securitytracker.com/id/1037249
vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securityfocus.com/bid/94040
vdb-entryx_refsource_BID

EPSS Score

46% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.