4.7

CVE-2012-0045

Exploit
The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application, as demonstrated by an NASM file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.2.13
Linux ≫ Linux Kernel Version 3.0 Update rc1
Linux ≫ Linux Kernel Version 3.0 Update rc2
Linux ≫ Linux Kernel Version 3.0 Update rc3
Linux ≫ Linux Kernel Version 3.0 Update rc4
Linux ≫ Linux Kernel Version 3.0 Update rc5
Linux ≫ Linux Kernel Version 3.0 Update rc6
Linux ≫ Linux Kernel Version 3.0 Update rc7
Linux ≫ Linux Kernel Version 3.0.1
Linux ≫ Linux Kernel Version 3.0.2
Linux ≫ Linux Kernel Version 3.0.3
Linux ≫ Linux Kernel Version 3.0.4
Linux ≫ Linux Kernel Version 3.0.5
Linux ≫ Linux Kernel Version 3.0.6
Linux ≫ Linux Kernel Version 3.0.7
Linux ≫ Linux Kernel Version 3.0.8
Linux ≫ Linux Kernel Version 3.0.9
Linux ≫ Linux Kernel Version 3.0.10
Linux ≫ Linux Kernel Version 3.0.11
Linux ≫ Linux Kernel Version 3.0.12
Linux ≫ Linux Kernel Version 3.0.13
Linux ≫ Linux Kernel Version 3.0.14
Linux ≫ Linux Kernel Version 3.0.15
Linux ≫ Linux Kernel Version 3.0.16
Linux ≫ Linux Kernel Version 3.0.17
Linux ≫ Linux Kernel Version 3.0.18
Linux ≫ Linux Kernel Version 3.0.19
Linux ≫ Linux Kernel Version 3.0.20
Linux ≫ Linux Kernel Version 3.0.21
Linux ≫ Linux Kernel Version 3.0.22
Linux ≫ Linux Kernel Version 3.0.23
Linux ≫ Linux Kernel Version 3.0.24
Linux ≫ Linux Kernel Version 3.0.25
Linux ≫ Linux Kernel Version 3.0.26
Linux ≫ Linux Kernel Version 3.0.27
Linux ≫ Linux Kernel Version 3.0.28
Linux ≫ Linux Kernel Version 3.0.29
Linux ≫ Linux Kernel Version 3.0.30
Linux ≫ Linux Kernel Version 3.0.31
Linux ≫ Linux Kernel Version 3.0.32
Linux ≫ Linux Kernel Version 3.0.33
Linux ≫ Linux Kernel Version 3.0.34
Linux ≫ Linux Kernel Version 3.1
Linux ≫ Linux Kernel Version 3.1 Update rc1
Linux ≫ Linux Kernel Version 3.1 Update rc2
Linux ≫ Linux Kernel Version 3.1 Update rc3
Linux ≫ Linux Kernel Version 3.1 Update rc4
Linux ≫ Linux Kernel Version 3.1.1
Linux ≫ Linux Kernel Version 3.1.2
Linux ≫ Linux Kernel Version 3.1.3
Linux ≫ Linux Kernel Version 3.1.4
Linux ≫ Linux Kernel Version 3.1.5
Linux ≫ Linux Kernel Version 3.1.6
Linux ≫ Linux Kernel Version 3.1.7
Linux ≫ Linux Kernel Version 3.1.8
Linux ≫ Linux Kernel Version 3.1.9
Linux ≫ Linux Kernel Version 3.1.10
Linux ≫ Linux Kernel Version 3.2
Linux ≫ Linux Kernel Version 3.2.1
Linux ≫ Linux Kernel Version 3.2.2
Linux ≫ Linux Kernel Version 3.2.3
Linux ≫ Linux Kernel Version 3.2.4
Linux ≫ Linux Kernel Version 3.2.5
Linux ≫ Linux Kernel Version 3.2.6
Linux ≫ Linux Kernel Version 3.2.7
Linux ≫ Linux Kernel Version 3.2.8
Linux ≫ Linux Kernel Version 3.2.9
Linux ≫ Linux Kernel Version 3.2.10
Linux ≫ Linux Kernel Version 3.2.11
Linux ≫ Linux Kernel Version 3.2.12
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.01% 0.587
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c2226fc9e87ba3da060e47333657cd6616652b84
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.14
http://www.openwall.com/lists/oss-security/2012/01/12/2
Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=773370
Exploit
https://github.com/torvalds/linux/commit/c2226fc9e87ba3da060e47333657cd6616652b84
Patch
Exploit