CVE-2018-8437

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 6.2

CVSS2: 5.5

EPSS Низкий

Описание

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8436, CVE-2018-8438.

Ссылки

http://www.securityfocus.com/bid/105237
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041624
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8437
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105237
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041624
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8437
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*

cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00426

Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2018-8437

CVSS3: 5.4

msrc

почти 7 лет назад

Windows Hyper-V Denial of Service Vulnerability

GHSA-vfrj-3vj7-gff9

CVSS3: 6.2

github

около 3 лет назад

BDU:2018-01207

CVSS3: 4.7

fstec