peter bassill · operator
$ cve CVE-2011-1872 JSON

CVE-2011-1872 EXPLOIT

4.7
MEDIUM · CVSS 2.0 · EPSS 2.6% (pctl 85)

Patch early

A public exploit exists.

Description

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."

Scoring

CVSS4.7 (MEDIUM, v2.0)
VectorAV:L/AC:M/Au:N/C:N/I:N/A:C
EPSS2.64% — more likely to be exploited than 85% of all CVEs
WeaknessCWE-399
On CISA KEVno
Public exploityes
Published2011-06-16
Last modified2026-06-16

Affected (1)

VendorProduct
microsoftwindows server 2008

Public exploits

References

→ the Explorer  ·  watch your stack  ·  NVD