PT-2017-10436 · Microsoft · Windows Server 2008+6

Published 2017-04-11 · Updated 2017-07-11 · CVE-2017-0168

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Hyper-V Network Switch versions on Windows 8.1 Windows Hyper-V Network Switch versions on Windows Server 2008 Windows Hyper-V Network Switch versions on Windows Server 2008 R2 Windows Hyper-V Network Switch versions on Windows Server 2012 Windows Hyper-V Network Switch versions on Windows Server 2012 R2

Description An issue exists where the Windows Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest operating system, allowing attackers to obtain sensitive information and affect the system.

Recommendations For Windows 8.1, update the operating system to a version that includes the fix for this issue. For Windows Server 2008, apply the necessary patch or update to resolve the issue. For Windows Server 2008 R2, apply the necessary patch or update to resolve the issue. For Windows Server 2012, apply the necessary patch or update to resolve the issue. For Windows Server 2012 R2, apply the necessary patch or update to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-0168

Affected Products

Windows

Windows 8.1

Windows Hyper-V Network Switch

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2017-0168 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0168 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-0168 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0168 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0168 · Vendor Advisory
• http://securitytracker.com/id/1038232 · Note
• http://securityfocus.com/bid/97418 · Note