CVE

Id
61744  
CVE No.
CVE-2013-1797  
Status
Candidate  
Description
Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
618246 61744 CVE-2013-1797 MLIST:[oss-security] 20130320 linux kernel: kvm: CVE-2013-179[6..8]  View
618247 61744 CVE-2013-1797 URL:http://www.openwall.com/lists/oss-security/2013/03/20/9  View
618248 61744 CVE-2013-1797 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0b79459b482e85cb7426aa7da683a9f2c97aeae1  View
618249 61744 CVE-2013-1797 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=917013  View
618250 61744 CVE-2013-1797 CONFIRM:https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1  View
618251 61744 CVE-2013-1797 MANDRIVA:MDVSA-2013:176  View
618252 61744 CVE-2013-1797 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:176  View
618253 61744 CVE-2013-1797 REDHAT:RHSA-2013:0727  View
618254 61744 CVE-2013-1797 URL:http://rhn.redhat.com/errata/RHSA-2013-0727.html  View
618255 61744 CVE-2013-1797 REDHAT:RHSA-2013:0744  View
618256 61744 CVE-2013-1797 URL:http://rhn.redhat.com/errata/RHSA-2013-0744.html  View
618257 61744 CVE-2013-1797 REDHAT:RHSA-2013:0746  View
618258 61744 CVE-2013-1797 URL:http://rhn.redhat.com/errata/RHSA-2013-0746.html  View
618259 61744 CVE-2013-1797 REDHAT:RHSA-2013:0928  View
618260 61744 CVE-2013-1797 URL:http://rhn.redhat.com/errata/RHSA-2013-0928.html  View
618261 61744 CVE-2013-1797 REDHAT:RHSA-2013:1026  View
618262 61744 CVE-2013-1797 URL:http://rhn.redhat.com/errata/RHSA-2013-1026.html  View
618263 61744 CVE-2013-1797 SUSE:openSUSE-SU-2013:0847  View
618264 61744 CVE-2013-1797 URL:http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html  View
618265 61744 CVE-2013-1797 SUSE:openSUSE-SU-2013:0925  View
618266 61744 CVE-2013-1797 URL:http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html  View
618267 61744 CVE-2013-1797 SUSE:openSUSE-SU-2013:1187  View
618268 61744 CVE-2013-1797 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html  View
618269 61744 CVE-2013-1797 UBUNTU:USN-1809-1  View
618270 61744 CVE-2013-1797 URL:http://www.ubuntu.com/usn/USN-1809-1  View
618271 61744 CVE-2013-1797 UBUNTU:USN-1812-1  View
618272 61744 CVE-2013-1797 URL:http://www.ubuntu.com/usn/USN-1812-1  View
618273 61744 CVE-2013-1797 UBUNTU:USN-1813-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20630 JVNDB-2013-002205 Ruby 用 extlib gem におけるオブジェクトインジェクション攻撃を実行される脆弱性 Ruby 用 extlib gem は、文字列の値のキャストを適切に制限しないため、オブジェクトインジェクション攻撃を実行される、任意のコードを実行される、またはサービス運用妨害 (メモリおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2013-1802 61744 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002205.html  View