Kaspersky Threats

Description

Multiple serious vulnerabilities have been found in Microsoft Windows Hyper-V. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code and cause a denial of service.

Below is a complete list of vulnerabilities:

Multiple vulnerabilities related to an improper validation of guest operating system network traffic in Windows Hyper-V Network Switch can be exploited remotely via a specially designed application to execute arbitrary code;
Multiple vulnerabilities related to an improper validation of guest operating system user input in Windows Hyper-V Network Switch can be exploited remotely via a specially designed application to obtain sensitive information;
Multiple vulnerabilities related to an incorrect validation of input from a privileged user on a guest operating system can be exploited remotely via a specially designed application to cause a denial of service;
Multiple vulnerabilities related to an improper handling of an access from virtual machines to the Hyper-V Network Switch can be exploited remotely via a specially designed application to cause a denial of service.

Original advisories

CVE list

CVE-2017-0162
high
CVE-2017-0163
high
CVE-2017-0168
high
CVE-2017-0169
high
CVE-2017-0178
high
CVE-2017-0179
high
CVE-2017-0180
high
CVE-2017-0181
high
CVE-2017-0182
high
CVE-2017-0183
high
CVE-2017-0184
high
CVE-2017-0185
high
CVE-2017-0186
high

KB list

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!

Multiple vulnerabilities in Microsoft Windows Hyper-V