CVE-2013-1798 - CERT CVE

  1. CVE-2013-1798

ID CVE-2013-1798
Sažetak The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.
Reference
CVSS
Base: 6.2
Impact: 9.2
Exploitability:3.2
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK HIGH NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE NONE COMPLETE
CVSS vektor AV:A/AC:H/Au:N/C:C/I:N/A:C
Zadnje važnije ažuriranje 13-02-2023 - 04:41
Objavljeno 22-03-2013 - 11:59