4.3

CVE-2013-5634

Exploit
arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or possibly have unspecified other impact by omitting vCPU initialization before a KVM_GET_REG_LIST ioctl call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel HwPlatformarm64 Version <= 3.9.11
LinuxLinux Kernel Version3.9.0 HwPlatformarm64
LinuxLinux Kernel Version3.9.1 HwPlatformarm64
LinuxLinux Kernel Version3.9.2 HwPlatformarm64
LinuxLinux Kernel Version3.9.3 HwPlatformarm64
LinuxLinux Kernel Version3.9.4 HwPlatformarm64
LinuxLinux Kernel Version3.9.5 HwPlatformarm64
LinuxLinux Kernel Version3.9.6 HwPlatformarm64
LinuxLinux Kernel Version3.9.7 HwPlatformarm64
LinuxLinux Kernel Version3.9.8 HwPlatformarm64
LinuxLinux Kernel Version3.9.9 HwPlatformarm64
LinuxLinux Kernel Version3.9.10 HwPlatformarm64
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.504
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.5 6.9
AV:A/AC:H/Au:S/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2
Patch
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e8180dcaa8470ceca21109f143876fdcd9fe050a
http://www.openwall.com/lists/oss-security/2013/08/26/4
http://www.securityfocus.com/bid/61995
https://github.com/torvalds/linux/commit/e8180dcaa8470ceca21109f143876fdcd9fe050a
Patch
Exploit