SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2009-3676

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that…

HIGH 7.1EPSS 34.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 34.3%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to cause a denial of service (infinite loop and system hang) via a (1) SMBv1 or (2) SMBv2 response packet that contains (a) an incorrect length value in a NetBIOS header or (b) an additional length field at the end of this response packet, aka "SMB Client Incomplete Response Vulnerability."

CVSS 2.0
7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
EPSS
34.34% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-399
Affected
microsoft/windows 7 · microsoft/windows server 2008
Source
secure@microsoft.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.