4.7

CVE-2014-3611

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging incorrect PIT emulation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 3.17.2
Redhat ≫ Enterprise Linux Version5.0
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Debian ≫ Debian Linux Version7.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.209
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://rhn.redhat.com/errata/RHSA-2015-0284.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2417-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-2418-1
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0126.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2394-1
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0869.html
Third Party Advisory
http://www.debian.org/security/2014/dsa-3060
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/24/9
Patch
Third Party Advisory
Mailing List
http://www.ubuntu.com/usn/USN-2491-1
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2febc839133280d5a5e8e1179c94ea674489dae2
https://bugzilla.redhat.com/show_bug.cgi?id=1144878
Patch
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/2febc839133280d5a5e8e1179c94ea674489dae2
Patch
Third Party Advisory