NVD

Id
14369  
Name
CVE-2010-2938  
Description
arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying hardware support for these fields, which allows local users to cause a denial of service (host OS crash) by requesting a VMCS dump for a fully virtualized Xen guest.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2010-10-08  
Modified Date
2012-03-19  
Seq
2010-2938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79450 14369 CVE-2010-2938 http://support.avaya.com/css/P8/documents/100113326  View
79451 14369 CVE-2010-2938 RHSA-2010:0723  View
79452 14369 CVE-2010-2938 20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
79453 14369 CVE-2010-2938 43578  View
79454 14369 CVE-2010-2938 http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
79455 14369 CVE-2010-2938 http://xenbits.xensource.com/xen-unstable.hg?rev/15911  View
79456 14369 CVE-2010-2938 https://bugzilla.redhat.com/show_bug.cgi?id=620490  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36365 JVNDB-2010-002145 Linux kernel の arch/x86/hvm/vmx/vmcs.c におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux (RHEL) 上で稼動する Linux kernel の virtual-machine control structure (VMCS) 実装内にある arch/x86/hvm/vmx/vmcs.c は、Extended Page Tables (EPT) 機能がない状態において Intel platform を使用した際、ハードウェアのサポートによる検証を行わないまま VMCS フィールドにアクセスしてしまうため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2938 45518 CVE-2010-2938 14369 4.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002145.html 2010-09-29 2012-12-26 View