CVE-2020-0890: Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.</p>
Other sources
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0904.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-0890?
CVE-2020-0890 has been rated as critical, as it can lead to denial of service on affected systems.
How do I fix CVE-2020-0890?
To mitigate CVE-2020-0890, apply the latest security updates provided by Microsoft for the affected versions of Windows and Windows Server.
Who is affected by CVE-2020-0890?
CVE-2020-0890 affects users with Microsoft Hyper-V running on Windows 10 and Windows Server 2016 and 2019.
What type of attack can exploit CVE-2020-0890?
CVE-2020-0890 can be exploited by sending specially crafted data from a guest operating system to the host Hyper-V server.
Is CVE-2020-0890 a local or remote vulnerability?
CVE-2020-0890 is considered a local vulnerability as it requires an attacker to have a privileged account on the guest operating system.