Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8438

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system,

Description

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8436, CVE-2018-8437.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2012 R2

  • (Server Core installation)affected

Microsoft Windows RT 8.1

  • Windows RT 8.1affected

Microsoft Windows Server 2016

  • (Server Core installation)affected

Microsoft Windows 8.1

  • 32-bit systemsaffected
  • x64-based systemsaffected

Microsoft Windows 10

  • 32-bit Systemsaffected
  • Version 1607 for 32-bit Systemsaffected
  • Version 1607 for x64-based Systemsaffected
  • Version 1703 for 32-bit Systemsaffected
  • Version 1703 for x64-based Systemsaffected
  • Version 1709 for 32-bit Systemsaffected
  • Version 1709 for x64-based Systemsaffected
  • Version 1803 for 32-bit Systemsaffected
  • Version 1803 for x64-based Systemsaffected
  • x64-based Systemsaffected

Microsoft Windows 10 Servers

  • version 1709 (Server Core Installation)affected
  • version 1803 (Server Core Installation)affected

References