CVE-2017-8686

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 contains a vulnerability that allows an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption issue.

Risk Assessment

This vulnerability could lead to significant disruptions in the DHCP service, affecting network availability within the organization and allowing an attacker to gain control over the system.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor DHCP server logs for potential attack attempts.

Original NVD description (English source)

The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive, due to a memory corruption vulnerability in the Windows Server DHCP service, aka "Windows DHCP Server Remote Code Execution Vulnerability".