Detections
Analytics
MS KB3108638: Update for Windows Hyper-V to Address CPU Weakness
medium Nessus Plugin ID 86818
Language:
Synopsis
The remote Windows host is affected by multiple denial of service vulnerabilities.Description
The remote Windows host is affected by multiple denial of service vulnerabilities that can be triggered with certain central processing unit (CPU) chipsets. A local attacker with kernel-mode privileges on a Hyper-V guest can exploit this to cause all Hyper-V guests to become unresponsive.Solution
Microsoft has released a set of patches for Windows 2008, 2008 R2, 8, 2012, 8.1, 2012 R2, and 10.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3108638
https://support.microsoft.com/en-us/help/3105213/cumulative-update-for-windows-10-november-10-2015
Plugin Details
Severity: Medium
ID: 86818
File Name: smb_kb3108638.nasl
Version: 1.8
Type: local
Agent: windows
Family: Windows
Published: 11/10/2015
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.5
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 3.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 11/10/2015
Vulnerability Publication Date: 11/10/2015
Reference Information
CVE: CVE-2015-5307, CVE-2015-8104