/
oval_com.jovalcm.ms.cve_def_2021264160000.xml
84 lines (84 loc) · 6.12 KB
/
oval_com.jovalcm.ms.cve_def_2021264160000.xml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
<definition xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" class="vulnerability" id="oval:com.jovalcm.ms.cve:def:2021264160000" version="0">
<metadata>
<title>Windows Hyper-V Denial of Service Vulnerability - CVE-2021-26416</title>
<affected family="windows">
<platform>Microsoft Windows 10</platform>
<platform>Microsoft Windows Server 2016</platform>
<platform>Microsoft Windows Server 2019</platform>
</affected>
<reference ref_id="CVE-2021-26416" source="CVE" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26416"/>
<reference ref_id="MSRC-CVE-2021-26416" source="Vendor Advisory" ref_url="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416"/>
<reference ref_id="KB5001347" source="Vendor Advisory" ref_url="https://support.microsoft.com/en-us/help/5001347"/>
<reference ref_id="KB5001342" source="Vendor Advisory" ref_url="https://support.microsoft.com/en-us/help/5001342"/>
<reference ref_id="KB5001337" source="Vendor Advisory" ref_url="https://support.microsoft.com/en-us/help/5001337"/>
<reference ref_id="KB5001330" source="Vendor Advisory" ref_url="https://support.microsoft.com/en-us/help/5001330"/>
<description/>
<oval_repository>
<dates>
<submitted date="2021-04-16T13:39:16">
<contributor organization="JovalCM.com">David Ries</contributor>
</submitted>
</dates>
<status>INITIAL SUBMISSION</status>
<min_schema_version>5.11.2</min_schema_version>
</oval_repository>
</metadata>
<criteria operator="OR">
<criteria comment="Windows Server 2016 is vulnerable" operator="AND">
<extend_definition comment="Windows Server 2016 is installed" definition_ref="oval:org.cisecurity:def:1269"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160001" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.14393.4350"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160002" comment="hvax64.exe (10.x) version is less than 10.0.14393.4350"/>
</criteria>
</criteria>
<criteria comment="Windows 10 Version 1607 for x64-based Systems is vulnerable" operator="AND">
<extend_definition comment="Windows 10 Version 1607 for x64-based Systems is installed" definition_ref="oval:org.cisecurity:def:1379"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160001" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.14393.4350"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160002" comment="hvax64.exe (10.x) version is less than 10.0.14393.4350"/>
</criteria>
</criteria>
<criteria comment="Windows Server 2016 (Server Core installation) is vulnerable" operator="AND">
<extend_definition comment="Windows Server 2016 (Server Core installation) is installed" definition_ref="oval:org.cisecurity:def:3529"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160001" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.14393.4350"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160002" comment="hvax64.exe (10.x) version is less than 10.0.14393.4350"/>
</criteria>
</criteria>
<criteria comment="Windows 10 Version 1809 for x64-based Systems is vulnerable" operator="AND">
<extend_definition comment="Windows 10 Version 1809 for x64-based Systems is installed" definition_ref="oval:org.cisecurity:def:5821"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160003" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.17763.1879"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160004" comment="hvax64.exe (10.x) version is less than 10.0.17763.1879"/>
</criteria>
</criteria>
<criteria comment="Windows Server 2019 is vulnerable" operator="AND">
<extend_definition comment="Windows Server 2019 is installed" definition_ref="oval:org.cisecurity:def:5761"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160003" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.17763.1879"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160004" comment="hvax64.exe (10.x) version is less than 10.0.17763.1879"/>
</criteria>
</criteria>
<criteria comment="Windows 10 Version 1909 for x64-based Systems is vulnerable" operator="AND">
<extend_definition comment="Windows 10 Version 1909 for x64-based Systems is installed" definition_ref="oval:org.cisecurity:def:7268"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160005" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.18362.1500"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160006" comment="hvax64.exe (10.x) version is less than 10.0.18362.1500"/>
</criteria>
</criteria>
<criteria comment="Windows 10 Version 2004 for x64-based Systems is vulnerable" operator="AND">
<extend_definition definition_ref="oval:org.cisecurity:def:8477" comment="Microsoft Windows 10 Version 2004 (x64) is installed"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160008" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.19041.928"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160009" comment="hvax64.exe (10.x) version is less than 10.0.19041.928"/>
</criteria>
</criteria>
<criteria comment="Windows 10 Version 20H2 for x64-based Systems is vulnerable" operator="AND">
<extend_definition definition_ref="oval:org.cisecurity:def:8452" comment="Microsoft Windows 10 Version 20H2 (x64) is installed"/>
<criteria operator="OR">
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160008" comment="hvax64.exe (32-bit) (10.x) version is less than 10.0.19041.928"/>
<criterion test_ref="oval:com.jovalcm.ms.cve:tst:2021264160009" comment="hvax64.exe (10.x) version is less than 10.0.19041.928"/>
</criteria>
</criteria>
</criteria>
</definition>