CVE Catalog

CVE-2020-0909

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.44%

91th percentile - higher than 91% of all known CVEs

Summary

Denial of service vulnerability in Hyper-V on Windows Server due to improper handling of specially crafted network packets. An attacker could send such packets to the Hyper-V server, causing service failure.

Risk Assessment

Disruption of virtualization services, potentially leading to unavailability of critical systems.

Recommendation

Apply the security update that resolves the conditions where Hyper-V fails to handle network packets properly.

Original NVD description (English source)

A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets. To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server. The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS