4.3

CVE-2014-3601

Exploit
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Suse ≫ Linux Enterprise Real Time Extension Version11.0 Updatesp3
Opensuse ≫ Evergreen Version11.4
Suse ≫ Linux Enterprise Server Version11 Updatesp2 SwEditionltss
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Linux ≫ Linux Kernel Version <= 3.16.1
Linux ≫ Linux Kernel Version3.16.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.17% 0.632
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.5 6.9
AV:A/AC:H/Au:S/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2358-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2359-1
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
http://secunia.com/advisories/60830
http://www.securityfocus.com/bid/69489
http://www.ubuntu.com/usn/USN-2356-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2357-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1131951
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/95689
https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7
Patch
Exploit