CVE-2011-1872: Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial...

Security readout for executives and security teams

CVE-2011-1872 is a Hyper-V denial-of-service issue in Windows Server 2008 variants. A user inside a guest operating system could send malformed VMBus packet content that causes the host operating system to enter an infinite loop, disrupting virtual machine availability. Exposure is most likely where legacy Windows Server 2008 Hyper-V hosts still run workloads, especially if guest administrators or tenants are not fully trusted. Systems not using Hyper-V or not on the named Windows Server 2008 versions are not indicated as affected by the provided sources. Treat this as an availability risk for legacy virtualization infrastructure. It is not described as data theft or remote takeover, but a successful attack could disrupt a host and its dependent workloads. Prioritize remediation where untrusted guests or critical services share affected hosts. Mitigation focus: Review Microsoft MS11-047 and apply the vendor-provided guidance for affected Hyper-V hosts.; Inventory Windows Server 2008 Hyper-V hosts and prioritize any internet-facing or multi-tenant virtualization environments.; Restrict guest administration rights to trusted users until affected hosts are remediated..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.