CVE

Id
64074  
CVE No.
CVE-2013-4127  
Status
Candidate  
Description
Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel through 3.10.3 allows local users to cause a denial of service (OOPS and system crash) via vectors involving powering on a virtual machine.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
632659 64074 CVE-2013-4127 MLIST:[oss-security] 20130715 Re: CVE Request -- Linux kernel: vhost-net: use-after-free in vhost_net_flush  View
632660 64074 CVE-2013-4127 URL:http://www.openwall.com/lists/oss-security/2013/07/15/7  View
632661 64074 CVE-2013-4127 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=dd7633ecd553a5e304d349aa6f8eb8a0417098c5  View
632662 64074 CVE-2013-4127 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=980643  View
632663 64074 CVE-2013-4127 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=984722  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22597 JVNDB-2013-004172 KDE-Workspace におけるサービス運用妨害 (DoS) の脆弱性 KDE-Workspace は、glibc 2.17 の crypt および pw_encrypt 関数の戻り値を適切に処理しないため、サービス運用妨害 (NULL ポインタディフェンスおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-4132 64074 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004172.html  View