CVE-2017-11779

High · 8.1

CVSS

8.1

EPSS

33.1%

Published

Oct 13, 2017

CISA due date

—

The record

The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability".

Affected packages

Ecosystem	Package	Introduced	Fixed