CVE-2024-30011: 
vulnerability analysis and mitigation

Windows Hyper-V Denial of Service Vulnerability (CVE-2024-30011) was initially disclosed on May 14, 2024, affecting multiple versions of Microsoft Windows Server including Server 2012, 2016, 2019, and 2022. The vulnerability was identified and reported by Microsoft Corporation (Microsoft Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The technical classification identifies it as CWE-191 (Integer Underflow), as reported by Microsoft Corporation. The vulnerability requires network access and low privileges to exploit, with no user interaction needed (NVD).

This vulnerability specifically affects the availability of Windows Hyper-V services, potentially leading to denial of service conditions. The impact is primarily focused on system availability, with no direct effect on confidentiality or integrity of the system (Rapid7).

The vulnerability requires network access and low privileges to exploit, making it relatively accessible to attackers with basic access to the network. The attack complexity is considered low, indicating that the vulnerability is straightforward to exploit once access is obtained (NVD).

Microsoft has released security updates to address this vulnerability across affected Windows Server versions. The fixes are available through various KB updates including KB5037778 (Server 2012), KB5037823 (Server 2012 R2), KB5037763 (Server 2016), KB5037765 (Server 2019), and KB5037781/KB5037782 (Server 2022) (Rapid7).