NVD

Id
31775  
Name
CVE-2014-3610  
Description
The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific register, which allows guest OS users to cause a denial of service (host OS crash) by leveraging guest OS privileges, related to the wrmsr_interception function in arch/x86/kvm/svm.c and the handle_wrmsr function in arch/x86/kvm/vmx.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-11-10  
Modified Date
2017-01-02  
Seq
2014-3610  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167427 31775 CVE-2014-3610 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=854e8bb1aa06c578c2c9145fa6bfe3680ef63b23  View
167428 31775 CVE-2014-3610 SUSE-SU-2015:0481  View
167429 31775 CVE-2014-3610 openSUSE-SU-2015:0566  View
167430 31775 CVE-2014-3610 RHSA-2015:0869  View
167431 31775 CVE-2014-3610 DSA-3060  View
167432 31775 CVE-2014-3610 [oss-security] 20141024 kvm issues  View
167433 31775 CVE-2014-3610 70742  View
167434 31775 CVE-2014-3610 USN-2394-1  View
167435 31775 CVE-2014-3610 USN-2417-1  View
167436 31775 CVE-2014-3610 USN-2418-1  View
167437 31775 CVE-2014-3610 USN-2491-1  View
167438 31775 CVE-2014-3610 https://bugzilla.redhat.com/show_bug.cgi?id=1144883  View
167439 31775 CVE-2014-3610 https://github.com/torvalds/linux/commit/854e8bb1aa06c578c2c9145fa6bfe3680ef63b23  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16440 JVNDB-2014-005315 Linux Kernel の KVM サブシステムの WRMSR 処理機能におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の KVM サブシステムの WRMSR 処理機能は、モデル固有レジスタへの非カノニカルアドレスの書き込みを適切に処理しないため、サービス運用妨害 (ホスト OS クラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-3610 70898 CVE-2014-3610 31775 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005315.html 2014-10-24 2014-11-11 View