6.2

CVE-2013-1798

Exploit
The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.8.4
Linux ≫ Linux Kernel Version3.8.0
Linux ≫ Linux Kernel Version3.8.1
Linux ≫ Linux Kernel Version3.8.2
Linux ≫ Linux Kernel Version3.8.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.35% 0.68
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.2 3.2 9.2
AV:A/AC:H/Au:N/C:C/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:176
http://rhn.redhat.com/errata/RHSA-2013-0746.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html
http://rhn.redhat.com/errata/RHSA-2013-0928.html
http://rhn.redhat.com/errata/RHSA-2013-0744.html
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html
http://rhn.redhat.com/errata/RHSA-2013-1026.html
http://www.ubuntu.com/usn/USN-1809-1
http://www.ubuntu.com/usn/USN-1812-1
http://www.ubuntu.com/usn/USN-1813-1
http://rhn.redhat.com/errata/RHSA-2013-0727.html
http://www.openwall.com/lists/oss-security/2013/03/20/9
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2c118bfab8bc6b8bb213abfc35201e441693d55
http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html
https://bugzilla.redhat.com/show_bug.cgi?id=917017
https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55
Patch
Exploit