CVE

Id
70897  
CVE No.
CVE-2014-3601  
Status
Candidate  
Description
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.  
Phase
Assigned (20140514)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
675349 70897 CVE-2014-3601 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7  View
675350 70897 CVE-2014-3601 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1131951  View
675351 70897 CVE-2014-3601 CONFIRM:https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7  View
675352 70897 CVE-2014-3601 SUSE:SUSE-SU-2015:0481  View
675353 70897 CVE-2014-3601 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html  View
675354 70897 CVE-2014-3601 SUSE:openSUSE-SU-2015:0566  View
675355 70897 CVE-2014-3601 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html  View
675356 70897 CVE-2014-3601 SUSE:SUSE-SU-2015:0736  View
675357 70897 CVE-2014-3601 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html  View
675358 70897 CVE-2014-3601 UBUNTU:USN-2356-1  View
675359 70897 CVE-2014-3601 URL:http://www.ubuntu.com/usn/USN-2356-1  View
675360 70897 CVE-2014-3601 UBUNTU:USN-2357-1  View
675361 70897 CVE-2014-3601 URL:http://www.ubuntu.com/usn/USN-2357-1  View
675362 70897 CVE-2014-3601 UBUNTU:USN-2358-1  View
675363 70897 CVE-2014-3601 URL:http://www.ubuntu.com/usn/USN-2358-1  View
675364 70897 CVE-2014-3601 UBUNTU:USN-2359-1  View
675365 70897 CVE-2014-3601 URL:http://www.ubuntu.com/usn/USN-2359-1  View
675366 70897 CVE-2014-3601 BID:69489  View
675367 70897 CVE-2014-3601 URL:http://www.securityfocus.com/bid/69489  View
675368 70897 CVE-2014-3601 SECUNIA:60830  View
675369 70897 CVE-2014-3601 URL:http://secunia.com/advisories/60830  View
675370 70897 CVE-2014-3601 XF:linux-kernel-cve20143601-dos(95689)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15307 JVNDB-2014-004182 Squid の HttpHdrRange.cc におけるサービス運用妨害 (DoS) の脆弱性 Squid の HttpHdrRange.cc には、サービス運用妨害 (クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3609 70897 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004182.html  View