NVD

Id
31769  
Name
CVE-2014-3601  
Description
The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to (1) cause a denial of service (host OS memory corruption) or possibly have unspecified other impact by triggering a large gfn value or (2) cause a denial of service (host OS memory consumption) by triggering a small gfn value that leads to permanently pinned pages.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
2.5  
CVSS Vector
(AV:A/AC:H/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-08-31  
Modified Date
2017-01-06  
Seq
2014-3601  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167391 31769 CVE-2014-3601 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7  View
167392 31769 CVE-2014-3601 SUSE-SU-2015:0481  View
167393 31769 CVE-2014-3601 openSUSE-SU-2015:0566  View
167394 31769 CVE-2014-3601 SUSE-SU-2015:0736  View
167395 31769 CVE-2014-3601 60830  View
167396 31769 CVE-2014-3601 69489  View
167397 31769 CVE-2014-3601 USN-2356-1  View
167398 31769 CVE-2014-3601 USN-2357-1  View
167399 31769 CVE-2014-3601 USN-2358-1  View
167400 31769 CVE-2014-3601 USN-2359-1  View
167401 31769 CVE-2014-3601 linux-kernel-cve20143601-dos(95689)  View
167402 31769 CVE-2014-3601 https://bugzilla.redhat.com/show_bug.cgi?id=1131951  View
167403 31769 CVE-2014-3601 https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15137 JVNDB-2014-004012 Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数は、マッピングの失敗を処理している間、ページ数を誤って計算するため、(1) サービス運用妨害 (ホスト OS のメモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性、または (2) サービス運用妨害 (ホスト OS のメモリ消費) 状態にされる脆弱性が存在します。 CVE-2014-3601 70889 CVE-2014-3601 31769 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004012.html 2014-08-19 2014-09-03 View