CVE-2020-0904Improper Input Validation in Microsoft Windows 10 Version 1607

Severity
6.5MEDIUMNVD
EPSS
0.7%
top 28.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages15 packages

CVEListV5microsoft/windows_server_201610.0.0publication

Patches

🔴Vulnerability Details

2
GHSA
GHSA-m37p-rm58-x4hc: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a g2022-05-24
CVEList
Windows Hyper-V Denial of Service Vulnerability2020-09-11

📋Vendor Advisories

1
Microsoft
Windows Hyper-V Denial of Service Vulnerability2020-09-08
CVE-2020-0904 — Improper Input Validation in Microsoft | cvebase