NVD

Id
31841  
Name
CVE-2014-3690  
Description
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-11-10  
Modified Date
2015-06-03  
Seq
2014-3690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167895 31841 CVE-2014-3690 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d974baa398f34393db76be45f7d4d04fbdbb4a0a  View
167896 31841 CVE-2014-3690 SUSE-SU-2015:0178  View
167897 31841 CVE-2014-3690 SUSE-SU-2015:0481  View
167898 31841 CVE-2014-3690 openSUSE-SU-2015:0566  View
167899 31841 CVE-2014-3690 SUSE-SU-2015:0736  View
167900 31841 CVE-2014-3690 RHSA-2015:0290  View
167901 31841 CVE-2014-3690 RHSA-2015:0782  View
167902 31841 CVE-2014-3690 DSA-3060  View
167903 31841 CVE-2014-3690 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.17.2  View
167904 31841 CVE-2014-3690 MDVSA-2015:058  View
167905 31841 CVE-2014-3690 [oss-security] 20141021 CVE-2014-3690: KVM DoS triggerable by malicious host userspace  View
167906 31841 CVE-2014-3690 [oss-security] 20141029 Re: CVE-2014-3690: KVM DoS triggerable by malicious host userspace  View
167907 31841 CVE-2014-3690 70691  View
167908 31841 CVE-2014-3690 USN-2417-1  View
167909 31841 CVE-2014-3690 USN-2418-1  View
167910 31841 CVE-2014-3690 USN-2419-1  View
167911 31841 CVE-2014-3690 USN-2420-1  View
167912 31841 CVE-2014-3690 USN-2421-1  View
167913 31841 CVE-2014-3690 https://bugzilla.redhat.com/show_bug.cgi?id=1153322  View
167914 31841 CVE-2014-3690 https://github.com/torvalds/linux/commit/d974baa398f34393db76be45f7d4d04fbdbb4a0a  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16448 JVNDB-2014-005323 Intel プロセッサ上で稼動する Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c における任意のプロセスを強制終了される脆弱性 Intel プロセッサ上で稼動する Linux Kernel の KVM サブシステムの arch/x86/kvm/vmx.c は、CR4 制御レジスタ内の値が VM エントリ後にも同じままであることを確認しないため、任意のプロセスを強制終了される、またはサービス運用妨害 (システム障害) 状態にされる脆弱性が存在します。 CVE-2014-3690 70978 CVE-2014-3690 31841 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005323.html 2014-10-24 2015-05-13 View