Windows Hyper-V vSMB Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running. The update addresses the vulnerabilities by correcting how Windows Hyper-V validates vSMB packet data.
🎯 Affected products6
- Windows 10 Version 1511 for x64-based Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1703 for x64-based Systems
- Windows 10 for x64-based Systems
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
✅ Remediation
KB4019474 (Security Update) KB4019473 (Security Update) KB4019472 (Security Update) KB4016871 (Security Update)
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0212
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4019474
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4019473
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4019472
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4016871