CVE-2017-0095
HighSummary
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, allowing attackers to execute arbitrary code on a target OS.
Risk Assessment
This vulnerability may lead to remote code execution, posing a significant security risk to organizational systems.
Recommendation
It is recommended to update systems to the latest versions that include security patches addressing this vulnerability.
Other vulnerabilities in Hyper-V
See all- CVE-2020-0909High
Denial of service vulnerability in Hyper-V on Windows Server due to improper handling of specially crafted network packets. An attacker could send such packets to the Hyper-V server, causing service failure.
- CVE-2016-0088Critical
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application.
Original NVD description (English source)
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V vSMB Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0021.