TROYANOSYVIRUS
Voltar para CVEs

CVE-2019-0711

MEDIUM
6.8

Descricao

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.

Detalhes CVE

Pontuacao CVSS v3.16.8
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Vetor de ataqueADJACENT_NETWORK
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado6/12/2019
Ultima modificacao5/20/2025
Fontenvd
Avistamentos honeypot0

Produtos afetados

microsoft:windows_10microsoft:windows_8.1microsoft:windows_rt_8.1microsoft:windows_server_2012microsoft:windows_server_2016microsoft:windows_server_2019

Fraquezas (CWE)

CWE-20

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.