{ "id": "CVE-2024-38235", "sourceIdentifier": "secure@microsoft.com", "published": "2024-09-10T17:15:26.910", "lastModified": "2024-09-17T16:43:33.167", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Windows Hyper-V Denial of Service Vulnerability" }, { "lang": "es", "value": "Vulnerabilidad de denegaci\u00f3n de servicio en Windows Hyper-V" } ], "metrics": { "cvssMetricV31": [ { "source": "secure@microsoft.com", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, "exploitabilityScore": 2.0, "impactScore": 4.0 } ] }, "weaknesses": [ { "source": "secure@microsoft.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-416" } ] }, { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.10240.20766", "matchCriteriaId": "85DD5735-7C22-4A98-B404-08FEF44A640F" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.14393.7336", "matchCriteriaId": "90027BBC-56AF-4F14-A118-53BBA694A0CD" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.17763.6293", "matchCriteriaId": "ADD534CE-0B4C-43DB-A27C-AC67246D0A87" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.19044.4894", "matchCriteriaId": "E38D5738-DC17-4C50-B8BD-A847CDD772BB" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.19045.4894", "matchCriteriaId": "6A08D353-356F-4BB0-A43F-15EBD6E2FB83" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.22000.3197", "matchCriteriaId": "FF161E1C-AF7E-4F75-86BA-8479D0BA8086" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.22621.4169", "matchCriteriaId": "10708C4D-4596-4089-8DDB-5479DE084F64" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*", "versionEndExcluding": "10.0.22631.4169", "matchCriteriaId": "DFD03C4F-D6EA-41B7-A7E1-EE0C11407EA2" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.22631.4169", "matchCriteriaId": "5EFBBCCD-A83C-4D06-BBF0-1A4E5C9F0283" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*", "versionEndExcluding": "10.0.26100.1742", "matchCriteriaId": "6231A772-376C-4ED3-919B-EAD9D1439021" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*", "versionEndExcluding": "10.0.26100.1742", "matchCriteriaId": "82EA7851-0235-4ACA-8BDB-89243CF2BDA7" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.14393.7336", "matchCriteriaId": "A6291C92-7D32-4CC2-B601-FAF5B70F3BFD" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.17763.6293", "matchCriteriaId": "BD2C9E88-C858-4B3D-A8C5-251DD6B69FD6" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.20348.2700", "matchCriteriaId": "4399F533-0094-43CF-872E-FC8E4A21A904" }, { "vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.25398.1128", "matchCriteriaId": "FCB2DB55-B6D1-4D28-802F-D300BE10E9A0" } ] } ] } ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38235", "source": "secure@microsoft.com", "tags": [ "Patch", "Vendor Advisory" ] } ] }