{"schemaVersion":3,"id":"CVE-2017-0269","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka \"Windows SMB Denial of Service Vulnerability\". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280.","dates":{"published":"2017-05-12T14:00:00.000Z","modified":"2024-08-05T13:03:55.518Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.9,"severity":"medium","version":"3.0","versionLabel":"v3.0","source":"NVD","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.06465,"percentile":0.93675,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.06465},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06847,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06465,"percentile":0.93675}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06847,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06465,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06465,"percentile":0.93675}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"microsoft corporation","product":"server block message 1.0","name":"Server Block Message 1.0","label":"server block message 1.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","noFixRecorded":false,"fixedIn":null}],"versionsText":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","eol":null,"hubHref":"/vendor/microsoft_corporation/server_block_message_10"},{"vendor":"microsoft","product":"windows_10","name":"windows 10","label":"windows_10","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"1511","noFixRecorded":false,"fixedIn":null},{"text":"1607","noFixRecorded":false,"fixedIn":null},{"text":"1703","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 1511 | 1607 | 1703","eol":null,"hubHref":"/vendor/microsoft/windows_10"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0269","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Mitigation","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/98263","label":"www.securityfocus.com/bid/98263","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1038433","label":"www.securitytracker.com/id/1038433","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","label":"ics-cert.us-cert.gov/advisories/ICSMA-18-058-02","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-05-12T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T13:03:55.518Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T20:05:46.219Z","stale":false,"partial":false}}