Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-3646

Опубликовано: 10 нояб. 2014
Источник: nvd
CVSS3: 5.5
CVSS2: 4.7
EPSS Низкий

Описание

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 3.17.2 (включая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*
Конфигурация 4
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp2:*:*:ltss:*:*:*

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 10 лет назад

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

redhat
больше 10 лет назад

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

CVSS3: 5.5
debian
больше 10 лет назад

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3. ...

CVSS3: 5.5
github
около 3 лет назад

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

oracle-oval
больше 10 лет назад

ELSA-2014-1843: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

4.7 Medium

CVSS2

Дефекты

NVD-CWE-noinfo