SB20170314144 - Hyper-V Information Disclosure Vulnerability

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20170314144

SB20170314144 - Hyper-V Information Disclosure Vulnerability

Published: March 14, 2017

Security Bulletin ID SB20170314144
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Information disclosure (CVE-ID: CVE-2017-0096)

The vulnerability allows a remote attacker with access to guest operating system to disclose memory information on the host system.

The vulnerability exists due to improper input validation in Windows Hyper-V. An attacker with access to guest operating system can disclose memory information on the host operating system.

Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive information.


Remediation

Install update from vendor's website.

References