CVE-2020-0909

CVE-2020-0909

High · published May 22, 2020

CVSS v3.1
7.5
EPSS
5%
Percentile
91.8
In the wild
Unconfirmed
What it is

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.

To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.

The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04730 · 91.8th percentile
Published
2020-05-22T03:15Z
Affected products (18)
ProductVersionsFixed in
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_10all versions—
microsoft/windows_7all versions—
microsoft/windows_8.1all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2008all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2012all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2019all versions—
References (2)
EPSS history
Timeline
  • 21 MAY 22:52Z
    A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the…
    cvelistv5