Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcwj-rgxv-c28p

Опубликовано: 01 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 3 года назад

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

CVSS3: 5.5
redhat
около 3 лет назад

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

CVSS3: 5.5
nvd
почти 3 года назад

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.

CVSS3: 5.5
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 5.5
debian
почти 3 года назад

A NULL pointer dereference issue was found in KVM when releasing a vCP ...

EPSS

Процентиль: 14%
0.00046
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476