CVE

Id
41466  
CVE No.
CVE-2009-4031  
Status
Candidate  
Description
The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455666 41466 CVE-2009-4031 MLIST:[oss-security] 20091125 CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytes  View
455667 41466 CVE-2009-4031 URL:http://www.openwall.com/lists/oss-security/2009/11/25/3  View
455668 41466 CVE-2009-4031 MLIST:[oss-security] 20091125 Re: CVE request: kernel: KVM: x86 emulator: limit instructions to 15 bytes  View
455669 41466 CVE-2009-4031 URL:http://www.openwall.com/lists/oss-security/2009/11/25/1  View
455670 41466 CVE-2009-4031 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git;a=commit;h=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88  View
455671 41466 CVE-2009-4031 CONFIRM:http://www.kernel.org/pub/linux/kernel/v2.6/next/patch-v2.6.32-rc8-next-20091125.gz  View
455672 41466 CVE-2009-4031 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=541160  View
455673 41466 CVE-2009-4031 FEDORA:FEDORA-2009-13098  View
455674 41466 CVE-2009-4031 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00777.html  View
455675 41466 CVE-2009-4031 SUSE:SUSE-SA:2010:018  View
455676 41466 CVE-2009-4031 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html  View
455677 41466 CVE-2009-4031 BID:37130  View
455678 41466 CVE-2009-4031 URL:http://www.securityfocus.com/bid/37130  View
455679 41466 CVE-2009-4031 OVAL:oval:org.mitre.oval:def:11089  View
455680 41466 CVE-2009-4031 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11089  View
455681 41466 CVE-2009-4031 SECUNIA:37720  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41458 JVNDB-2009-002465 Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 Xpdf、gpdf および kpdf の FoFiType1::parse 関数には、getNextLine 関数の戻り値をチェックしないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-4035 41466 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002465.html  View