Multiple vulnerabilities in Microsoft Windows Hyper-V

Description

Multiple serious vulnerabilities have been found in Microsoft Windows Hyper-V. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code and cause a denial of service.

Below is a complete list of vulnerabilities:

1. Multiple vulnerabilities related to an improper validation of guest operating system network traffic in Windows Hyper-V Network Switch can be exploited remotely via a specially designed application to execute arbitrary code;
2. Multiple vulnerabilities related to an improper validation of guest operating system user input in Windows Hyper-V Network Switch can be exploited remotely via a specially designed application to obtain sensitive information;
3. Multiple vulnerabilities related to an incorrect validation of input from a privileged user on a guest operating system can be exploited remotely via a specially designed application to cause a denial of service;
4. Multiple vulnerabilities related to an improper handling of an access from virtual machines to the Hyper-V Network Switch can be exploited remotely via a specially designed application to cause a denial of service.

Original advisories

• CVE-2017-0179

• CVE-2017-0178
• CVE-2017-0186
• CVE-2017-0162
• CVE-2017-0163
• CVE-2017-0182
• CVE-2017-0185
• CVE-2017-0184
• CVE-2017-0183
• CVE-2017-0168
• CVE-2017-0169
• CVE-2017-0180
• CVE-2017-0181
• CVE-2017-0162
• CVE-2017-0163
• CVE-2017-0168
• CVE-2017-0169
• CVE-2017-0178
• CVE-2017-0179
• CVE-2017-0180
• CVE-2017-0181
• CVE-2017-0182
• CVE-2017-0183
• CVE-2017-0184
• CVE-2017-0185
• CVE-2017-0186

Related products

• Microsoft-Windows-Server-2012
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Windows-RT
• Microsoft-Windows-10

CVE list

• CVE-2017-0162
  high
• CVE-2017-0163
  high
• CVE-2017-0168
  high
• CVE-2017-0169
  high
• CVE-2017-0178
  high
• CVE-2017-0179
  high
• CVE-2017-0180
  high
• CVE-2017-0181
  high
• CVE-2017-0182
  high
• CVE-2017-0183
  high
• CVE-2017-0184
  high
• CVE-2017-0185
  high
• CVE-2017-0186
  high

KB list

• 4015549
• 4015550
• 4015221
• 4015551
• 4015219
• 4015548
• 4015546
• 4015217
• 4015583
• 4015547
• 3217841
• 3211308

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com