Multiple vulnerabilities in Windows Hyper-V

Beschreibung

Multiple serious vulnerabilities have been found in Windows Hyper-V. Malicious users can exploit these vulnerabilities to cause a denial of service, execute arbitrary code and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Multiple validation errors of input from a privileged user on a guest operating system in Network Switch on a host server can be exploited remotely via a specially designed Office document to cause a denial of service;
2. Several cases of improper validations of vSMB packet data on a host server can be exploited remotely via a specially designed application run inside a virtual machine to execute arbitrary code in the host operating system;
3. An improper input validation of data received from an authenticated user on a guest operating system done on a host server can be exploited remotely via a specially designed application to execute arbitrary code on the host operating system;
4. An unknown vulnerability can be exploited remotely via a specially designed application to obtain sensitive information from the host OS memory.

Ursprüngliche Informationshinweise

• MS17-008

• CVE-2017-0051
• CVE-2017-0021
• CVE-2017-0095
• CVE-2017-0096
• CVE-2017-0097
• CVE-2017-0098
• CVE-2017-0099
• CVE-2017-0109
• CVE-2017-0074
• CVE-2017-0075
• CVE-2017-0076

CVE Liste

• CVE-2017-0051
  critical
• CVE-2017-0021
  critical
• CVE-2017-0095
  critical
• CVE-2017-0096
  critical
• CVE-2017-0097
  critical
• CVE-2017-0098
  critical
• CVE-2017-0099
  critical
• CVE-2017-0109
  critical
• CVE-2017-0074
  critical
• CVE-2017-0075
  critical
• CVE-2017-0076
  critical

KB Liste

• 4012217
• 4012215
• 4012216
• 4012606
• 4013198
• 4013429
• 4013082
• 3211306
• 4012212
• 4012214
• 4012213

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com