7.8

CVE-2009-4031

The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 2.6.32
Linux ≫ Linux Kernel Version2.6.32 Update-
Linux ≫ Linux Kernel Version2.6.32 Updaterc1
Linux ≫ Linux Kernel Version2.6.32 Updaterc2
Linux ≫ Linux Kernel Version2.6.32 Updaterc3
Linux ≫ Linux Kernel Version2.6.32 Updaterc4
Linux ≫ Linux Kernel Version2.6.32 Updaterc5
Linux ≫ Linux Kernel Version2.6.32 Updaterc6
Linux ≫ Linux Kernel Version2.6.32 Updaterc7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.11% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/37720
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88
http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2009/11/25/1
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2009/11/25/3
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/37130
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=541160
Third Party Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11089
Third Party Advisory