4.9

CVE-2009-1242

The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka "Long mode enable") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.29.1
Opensuse ≫ Opensuse Version11.0
Opensuse ≫ Opensuse Version11.1
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Fedoraproject ≫ Fedora Version10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.371
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/34981
Third Party Advisory
http://www.debian.org/security/2009/dsa-1787
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/35394
Third Party Advisory
http://secunia.com/advisories/35120
Third Party Advisory
http://secunia.com/advisories/35121
Third Party Advisory
http://wiki.rpath.com/Advisories:rPSA-2009-0084
Broken Link
http://www.debian.org/security/2009/dsa-1800
Third Party Advisory
http://www.securityfocus.com/archive/1/503610/100/0/threaded
Third Party Advisory
VDB Entry
http://secunia.com/advisories/35656
Third Party Advisory
http://www.ubuntu.com/usn/usn-793-1
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=16175a796d061833aacfbd9672235f2d2725df65
http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00002.html
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2009/04/01/3
Patch
Third Party Advisory
Mailing List
http://patchwork.kernel.org/patch/15549/
Patch
Vendor Advisory
http://secunia.com/advisories/34478
Third Party Advisory
http://secunia.com/advisories/35226
Third Party Advisory
http://secunia.com/advisories/35387
Third Party Advisory
http://vigilance.fr/vulnerability/Linux-kernel-denial-of-service-via-EFER-8585
Third Party Advisory
http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of%2C20090402%2C8311
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.29.1
Broken Link
http://www.kernel.org/pub/linux/kernel/v2.6/snapshots/patch-2.6.29-git1.log
Broken Link
http://www.securityfocus.com/bid/34331
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2009/0924
Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=502109
Patch
Third Party Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/49594
Third Party Advisory
VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01126.html
Third Party Advisory