CVE-2017-0097

Description

Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 and R2; Windows 10, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka Hyper-V Denial of Service Vulnerability. This vulnerability is different from those described in CVE-2017-0098, CVE-2017-0074, CVE-2017-0076, and CVE-2017-0099.

Risk Information

Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.585

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Browser Spoofing Vulnerability for Windows Server 2016 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4013429) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1607 (KB4013429) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems -WannaCrypt Ransomware Worm (KB4012215)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012215)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 7 - WannaCrypt Ransomware Worm(KB4012215)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 for x64-based Systems (KB4012606) - CumulativeWindows
Internet Explorer Information Disclosure Vulnerability for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)Windows
Internet Explorer Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)Windows
Microsoft Browser Information Disclosure Vulnerability for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012217)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 for x64-based Systems (KB4013198) - CumulativeWindows
Microsoft Browser Spoofing Vulnerability for Windows 10 Version 1511 (KB4013198) - CumulativeWindows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard for x64-based Systems (KB4012214)Windows
Windows Uniscribe Information Disclosure Vulnerability for Windows Embedded 8 Standard (KB4012214)Windows
Microsoft Browser Spoofing Vulnerability for Windows 10 (KB4012606)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-22054Cumulative Update for Windows Server 2016 for x64-based Systems (KB4013429)
PATCH-22053Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4013429)
PATCH-22052Cumulative Update for Windows 10 Version 1607 (KB4013429)
PATCH-22046March, 2017 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems -WannaCrypt Ransomware Worm (KB4012215)
PATCH-22045March, 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012215)
PATCH-22044March, 2017 Security Monthly Quality Rollup for Windows 7 - WannaCrypt Ransomware Worm(KB4012215)
PATCH-22049Cumulative Update for Windows 10 for x64-based Systems (KB4012606)
PATCH-22149March, 2017 Security Monthly Quality Rollup for Windows Server 2012 R2- WannaCrypt Ransomware Worm(KB4012216)
PATCH-22148March, 2017 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22047March, 2017 Security Monthly Quality Rollup for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012216)
PATCH-22150March, 2017 Security Monthly Quality Rollup for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012217)
PATCH-22063March, 2017 Security Only Quality Update for Windows 7 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22062March, 2017 Security Only Quality Update for Windows 7 - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22064March, 2017 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012212)
PATCH-22051Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB4013198)
PATCH-22050Cumulative Update for Windows 10 Version 1511 (KB4013198)
PATCH-22066March, 2017 Security Only Quality Update for Windows 8.1 for x64-based Systems - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22065March, 2017 Security Only Quality Update for Windows 8.1 - WannaCrypt Ransomware Worm(KB4012213)
PATCH-22067March, 2017 Security Only Quality Update for Windows Server 2012 R2 - WannaCrypt Ransomware Worm (KB4012213)
PATCH-22070March, 2017 Security Only Quality Update for Windows Server 2012 - WannaCrypt Ransomware Worm(KB4012214)
PATCH-22048Cumulative Update for Windows 10 (KB4012606)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234