NVD

Id
19481  
Name
CVE-2016-3713  
Description
The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
5.6  
Severity
Medium  
CVSS Base Score
5.6  
CVSS Impact Subscore
7.8  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-06-27  
Modified Date
2016-06-27  
Seq
2016-3713  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107270 19481 CVE-2016-3713 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9842df62004f366b9fed2423e24df10542ee0dc5  View
107271 19481 CVE-2016-3713 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.1  View
107272 19481 CVE-2016-3713 [oss-security] 20160516 CVE-2016-3713 Linux kernel: kvm: OOB r/w access issue with MSR 0x2F8  View
107273 19481 CVE-2016-3713 https://bugzilla.redhat.com/show_bug.cgi?id=1332139  View
107274 19481 CVE-2016-3713 https://github.com/torvalds/linux/commit/9842df62004f366b9fed2423e24df10542ee0dc5  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2563 JVNDB-2016-003336 Linux Kernel の arch/x86/kvm/mtrr.c の msr_mtrr_valid 関数における kvm_arch_vcpu のデータ構造を読み書きされる脆弱性 Linux Kernel の arch/x86/kvm/mtrr.c の msr_mtrr_valid 関数は、MSR 0x2f8 をサポートするため、kvm_arch_vcpu のデータ構造を読み書きされ、その結果、重要な情報を取得される、またはサービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-3713 90219 CVE-2016-3713 19481 5.6 7.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003336.html 2016-06-01 2016-06-28 View