CVE-2017-0016

Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability."

• CWE-476

• http://www.securityfocus.com/bid/95969Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037767
• http://www.securitytracker.com/id/1038001
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0016Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95969Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037767
• http://www.securitytracker.com/id/1038001
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0016Patch, Vendor Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0009Microsoft Internet Explorer 9 through 11 allow remote attack…
• CVE-2017-0010A remote code execution vulnerability exists in the way affe…
• CVE-2017-0011Microsoft Edge allows remote attackers to obtain sensitive i…
• CVE-2017-0012Microsoft Internet Explorer 11 and Microsoft Edge allow remo…
• CVE-2017-0014The Windows Graphics Component in Microsoft Office 2010 SP2;…
• CVE-2017-0015A remote code execution vulnerability exists in the way affe…
• CVE-2017-0017The RegEx class in the XSS filter in Microsoft Edge allows r…
• CVE-2017-0018Microsoft Internet Explorer 10 and 11 allow remote attackers…
• CVE-2017-0019Microsoft Word 2016 allows remote attackers to execute arbit…
• CVE-2017-0020Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and…
• CVE-2017-0021Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016…
• CVE-2017-0022Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511…6.5