Microsoft Hyper-V VMBus Denial of Service Vulnerability
BID:45293
Info
Microsoft Hyper-V VMBus Denial of Service Vulnerability
| Bugtraq ID: | 45293 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-3960 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 14 2010 12:00AM |
| Updated: | Dec 14 2010 12:00AM |
| Credit: | HP and techit |
| Vulnerable: |
Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for x64-based Systems R2 Microsoft Windows Server 2008 for x64-based Systems 0 |
| Not Vulnerable: | |
Discussion
Microsoft Hyper-V VMBus Denial of Service Vulnerability
Microsoft Hyper-V is prone to a denial-of-service vulnerability.
Using a guest system, a local attacker can exploit this issue to force the Hyper-V server to become unresponsive, denying service to legitimate users. The denial-of-service conditions would also affect other guest operating systems.
The issue affects Hyper-V on Microsoft Windows Server 2008 and Windows Server 2008 R2.
Microsoft Hyper-V Server 2008 and Microsoft Hyper-V Server 2008 R2 are also affected.
Microsoft Hyper-V is prone to a denial-of-service vulnerability.
Using a guest system, a local attacker can exploit this issue to force the Hyper-V server to become unresponsive, denying service to legitimate users. The denial-of-service conditions would also affect other guest operating systems.
The issue affects Hyper-V on Microsoft Windows Server 2008 and Windows Server 2008 R2.
Microsoft Hyper-V Server 2008 and Microsoft Hyper-V Server 2008 R2 are also affected.
Exploit / POC
Microsoft Hyper-V VMBus Denial of Service Vulnerability
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Hyper-V VMBus Denial of Service Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Windows Server 2008 for x64-based Systems R2
Microsoft Windows Server 2008 for x64-based Systems SP2
Microsoft Windows Server 2008 for x64-based Systems 0
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Windows Server 2008 for x64-based Systems R2
-
Microsoft Windows6.1-KB2345316-x64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=39B7ABC7-65A4 -4DFD-92BA-C638E3DE1118
Microsoft Windows Server 2008 for x64-based Systems SP2
-
Microsoft Windows6.0-KB2345316-x64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=B8C06BBC-6E84 -4CF1-89F0-C0D34CFFFAED
Microsoft Windows Server 2008 for x64-based Systems 0
-
Microsoft Windows6.0-KB2345316-x64.msu
http://www.microsoft.com/downloads/details.aspx?familyid=B8C06BBC-6E84 -4CF1-89F0-C0D34CFFFAED
References
Microsoft Hyper-V VMBus Denial of Service Vulnerability
References:
References:
- Microsoft Hyper-V Server Homepage (Microsoft)
- Microsoft Security Bulletin MS10-102 (Microsoft)