Red Hat Security AdvisoryRHSA-2014:0163
kvm security update
Released 2014-02-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) kmod-kvm-83-266.el5_10.1, kmod-kvm-debug-83-266.el5_10.1, kvm-83-266.el5_10.1 +2
- Red Hat Enterprise Linux Virtualization (v. 5 server) kmod-kvm-83-266.el5_10.1, kmod-kvm-debug-83-266.el5_10.1, kvm-83-266.el5_10.1 +2
Fixes 2 records
Priority LOW 29
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00613 · Published 2013-12-14 · Partial fix CWE-20
Priority LOW 29
The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifica…
CVSS 2.0MEDIUM 5.7· Adjacent network · No auth · Interaction — · EPSS 0.01446 · Published 2013-12-14 · Partial fix CWE-189
