Home

CVE-2017-8704

Description

The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka Hyper-V Denial of Service Vulnerability.

Risk Information

Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.231

Associated Vulnerability

VulnerabilityOS Platform
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows Server 2016 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4038782) - DeltaWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - CumulativeWindows
NetBIOS Remote Code Execution Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4038782) - DeltaWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-23011Cumulative Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23014Delta Update for Windows Server 2016 for x64-based Systems (KB4038782)
PATCH-23010Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23013Delta Update for Windows 10 Version 1607 for x64-based Systems (KB4038782)
PATCH-23009Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)
PATCH-23012Delta Update for Windows 10 Version 1607 for x86-based Systems (KB4038782)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234