Lucene search

[email protected]CVE-2018-8437

HistorySep 13, 2018 - 12:29 a.m.

CVE-2018-8437

2018-09-1300:29:04

CWE-20

[email protected]

web.nvd.nist.gov

microsoft

hyper-v

network switch

denial of service

vulnerability

windows 10

servers

cve-2018-8437

5.5 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

6.2 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka “Windows Hyper-V Denial of Service Vulnerability.” This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8436, CVE-2018-8438.

Affected configurations

Vulners

NVD

Node

microsoftwindows_10MatchVersion 1803 for x64-based Systems

microsoftwindows_10

VendorProductVersionCPE
microsoftwindows_10Version 1803 for x64-based Systemscpe:2.3:o:microsoft:windows_10:Version 1803 for x64-based Systems:*:*:*:*:*:*:*
microsoftwindows_10*cpe:2.3:o:microsoft:windows_10:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10	Version 1803 for x64-based Systems	cpe:2.3:o:microsoft:windows_10:Version 1803 for x64-based Systems:::::::*
microsoft	windows_10	*	cpe:2.3:o:microsoft:windows_10::::::::

CNA Affected

[
  {
    "product": "Windows 10",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1803 for x64-based Systems"
      }
    ]
  },
  {
    "product": "Windows 10 Servers",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1803  (Server Core Installation)"
      }
    ]
  }
]