Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-12904

Опубликовано: 27 июн. 2018
Источник: nvd
CVSS3: 4.9
CVSS2: 4.4
EPSS Низкий

Описание

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 4.17.2 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 40%
0.00182
Низкий

4.9 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 4.9
ubuntu
больше 7 лет назад

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.

CVSS3: 7.8
redhat
больше 7 лет назад

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.

CVSS3: 4.9
debian
больше 7 лет назад

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested v ...

CVSS3: 4.9
github
больше 3 лет назад

In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could cause L1 KVM guests to VMEXIT, potentially allowing privilege escalations and denial of service attacks due to lack of checking of CPL.

suse-cvrf
больше 7 лет назад

Security update for the Linux Kernel (Live Patch 0 for SLE 15)

EPSS

Процентиль: 40%
0.00182
Низкий

4.9 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo