Denial of Service Vulnerability in Microsoft Hyper-V on Windows 10 and Windows Server
CVE-2017-8704

5.3MEDIUM

Key Information:

Vendor

Microsoft
Status
Windows Hyper-v
Vendor
CVE Published:
13 September 2017

What is CVE-2017-8704?

The Hyper-V component in Microsoft Windows 10 version 1607 and Windows Server 2016 contains a vulnerability that can lead to a denial of service. This issue arises when the system fails to properly validate inputs from authenticated users within a guest operating environment, potentially allowing attackers to disrupt service availability. To secure systems, it is critical to apply available security updates and follow best practices for Hyper-V configurations.

Affected Version(s)

Windows Hyper-V Microsoft Windows 10 1607 and Windows Server 2016

References

http://www.securityfocus.com/bid/100787
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039317
vdb-entryx_refsource_SECTRACK
https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-8704 : Denial of Service Vulnerability in Microsoft Hyper-V on Windows 10 and Windows Server