Microsoft Hyper-V Local Denial of Service Vulnerability

Bugtraq ID:	38113
Class:	Unknown
CVE:	CVE-2010-0026
Remote:	No
Local:	Yes
Published:	Feb 09 2010 12:00AM
Updated:	Feb 09 2010 12:00AM
Credit:	Jan Bottorff
Vulnerable:	Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for x64-based Systems R2 Microsoft Windows Server 2008 for x64-based Systems 0
Not Vulnerable:

Microsoft Hyper-V Local Denial of Service Vulnerability

Microsoft Hyper-V is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected computer, denying service to legitimate users.

Microsoft Hyper-V Local Denial of Service Vulnerability

Currently we are not aware of any exploits for the issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Microsoft Hyper-V Local Denial of Service Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft Windows Server 2008 for x64-based Systems R2

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB977894)
  http://www.microsoft.com/downloads/details.aspx?familyid=3214b347-d901 -4aac-85ce-676e4602de87

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB977894)
  http://www.microsoft.com/downloads/details.aspx?familyid=3463a63c-e88a -4036-ab60-f84d4bf4191a

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB977894)
  http://www.microsoft.com/downloads/details.aspx?familyid=3463a63c-e88a -4036-ab60-f84d4bf4191a

Microsoft Hyper-V Local Denial of Service Vulnerability

References:

• Microsoft Hyper-V Server Homepage (Microsoft)
  
• Microsoft Security Bulletin MS10-010 (Microsoft)