CVE-2019-0715

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash. The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.

Score
CVSS 3.1 5.8 Medium
Status
Modified - secure@microsoft.com
Published
2019-08-14
Last modified
2024-08-04
Weaknesses
CWE-20

Affected products

References

 
 
© AVABIS GmbH privacypolicy about