CVE-2019-0717: Windows Hyper-V Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0714, CVE-2019-0715, CVE-2019-0718, CVE-2019-0723.
Other sources
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already have a privileged account on a guest operating system running as a virtual machine. They can then run a specially crafted application in that guest to target the Hyper-V host.
What is the impact of successful exploitation?
Successful exploitation can cause the host server to crash, resulting in a denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.
Which systems are identified as affected?
The listed software includes Microsoft Windows 10, Microsoft Windows Server 2016, and Microsoft Windows Server 2019. The affected component is the Microsoft Hyper-V Network Switch on the host server.
What should be done to remediate the issue?
Apply the available patch. The update modifies how virtual machines access the Hyper-V Network Switch.