CVE-2018-8438: Input Validation

Published Sep 13, 2018

Updated

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8436, CVE-2018-8437.

Affected Software

10 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 8.1

Microsoft Windows Server=2012-r2

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8438

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8438?

CVE-2018-8438 is classified as a denial of service vulnerability.

How do I fix CVE-2018-8438?

To fix CVE-2018-8438, apply the latest security updates provided by Microsoft for your affected Windows version.

Which versions of Windows are affected by CVE-2018-8438?

CVE-2018-8438 affects Microsoft Windows 10, Windows 8.1, and Windows Server 2012 R2 among others.

What impact does CVE-2018-8438 have on my system?

CVE-2018-8438 can cause a denial of service, rendering the system inoperable until rebooted.

Is CVE-2018-8438 exploitable remotely?

CVE-2018-8438 can be exploited by a privileged user on a guest operating system affecting the host server.