CVE-2020-0909
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
Denial of service vulnerability in Hyper-V on Windows Server due to improper handling of specially crafted network packets. An attacker could send such packets to the Hyper-V server, causing service failure.
Risk Assessment
Disruption of virtualization services, potentially leading to unavailability of critical systems.
Recommendation
Apply the security update that resolves the conditions where Hyper-V fails to handle network packets properly.
Other vulnerabilities in Hyper-V
See all- CVE-2017-0095High
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly validate vSMB packet data, allowing attackers to execute arbitrary code on a target OS.
- CVE-2016-0088Critical
Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application.
Original NVD description (English source)
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS