[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Hyper-V Remote Code Execution Vulnerability - CVE-2021-28476

ID: oval:org.secpod.oval:def:71831Date: (C)2021-05-12   (M)2024-04-17
Class: VULNERABILITYFamily: windows




Hyper-V Remote Code Execution Vulnerability. This issue allows a guest VM to force the Hyper-V host's kernel to read from an arbitrary, potentially invalid address. The contents of the address read would not be returned to the guest VM. In most circumstances, this would result in a denial of service of the Hyper-V host (bugcheck) due to reading an unmapped address. It is possible to read from a memory mapped device register corresponding to a hardware device attached to the Hyper-V host which may trigger additional, hardware device specific side effects that could compromise the Hyper-V host's security.

Platform:
Microsoft Windows 10
Microsoft Windows Server
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2019
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Reference:
CVE-2021-28476
CVE    1
CVE-2021-28476
CPE    25
cpe:/o:microsoft:windows_server:2004::x64
cpe:/o:microsoft:windows_10:2004
cpe:/o:microsoft:windows_server:1909::x64
cpe:/o:microsoft:windows_server:20h2::x64
...

© SecPod Technologies