CVE-2020-0751
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
11/02/2020
Last modified:
13/02/2020
Description
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a user on a guest operating system.To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to handle these requests., aka 'Windows Hyper-V Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-0661.
Impact
Base Score 3.x
6.00
Severity 3.x
MEDIUM
Base Score 2.0
2.10
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:x64:* | ||
| cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:* | ||
| cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page