CVE-2020-0751: Windows Hyper-V Denial of Service Vulnerability

Overview

Severity

Medium (CVSS 6)

CVSS Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C

Category

Denial of Service

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2020-Feb

Released

2020-02-11

EPSS Score

0.28% (percentile: 51.8%)

Description

A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests.

Affected Products (4)

Windows

• Windows 10 Version 1903 for x64-based Systems
• Windows Server, version 1903 (Server Core installation)
• Windows 10 Version 1909 for x64-based Systems
• Windows Server, version 1909 (Server Core installation)

Security Updates (1)

• 4532693

Acknowledgments

<a href="https://twitter.com/ergot86">Daniel Fernandez Kuehr</a> of Blue Frost Security GmbH

Revision History

• 2020-02-11: Information published.