NVD

Id
29077  
Name
CVE-2014-0155  
Description
The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
5.1  
CVSS Vector
(AV:A/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-04-14  
Modified Date
2014-04-15  
Seq
2014-0155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153614 29077 CVE-2014-0155 http://git.kernel.org/cgit/virt/kvm/kvm.git/commit/?id=5678de3f15010b9022ee45673f33bcfc71d47b60  View
153615 29077 CVE-2014-0155 [oss-security] 20140407 CVE-2014-0155 -- kernel: kvm: BUG caused by invalid entry in guest ioapic redirection table  View
153616 29077 CVE-2014-0155 https://bugzilla.redhat.com/show_bug.cgi?id=1081589  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13131 JVNDB-2014-002006 Linux Kernel の virt/kvm/ioapic.c の ioapic_deliver 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の virt/kvm/ioapic.c の ioapic_deliver 関数は、kvm_irq_delivery_to_apic の戻り値を適切に検証しないため、サービス運用妨害 (ホスト OS クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-0155 67556 CVE-2014-0155 29077 5.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002006.html 2014-04-04 2014-04-16 View