PT-2018-1645 · Microsoft · Windows Server 2016+11
Publicado
2018-09-11
·
Atualizado
2021-09-13
·
CVE-2018-8434
CVSS v2.0
5.4
Média
| Vetor | AV:N/AC:H/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Windows Hyper-V versions prior to the fixed version
Windows 7
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2008
Windows Server 2012
Windows 8.1
Windows Server 2016
Windows Server 2008 R2
Windows 10
Windows 10 Servers
Description
An information disclosure issue exists due to improper input validation from an authenticated user on a guest operating system. This allows an attacker to potentially disclose protected information using a specially crafted application.
Recommendations
For Windows 7, update to a version that includes the fix for this issue.
For Windows Server 2012 R2, apply the necessary patch or update.
For Windows RT 8.1, install the latest security updates.
For Windows Server 2008, ensure all security patches are applied.
For Windows Server 2012, update with the latest security fixes.
For Windows 8.1, apply the relevant security patch.
For Windows Server 2016, install the latest cumulative update.
For Windows Server 2008 R2, apply all available security updates.
For Windows 10, ensure the latest Windows updates are installed.
For Windows 10 Servers, apply the necessary security patches.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Windows
Windows 10
Windows 10 Servers
Windows 7
Windows 8.1
Windows Hyper-V
Windows Rt 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016