NVD

Id
35346  
Name
CVE-2014-8134  
Description
The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-12-12  
Modified Date
2017-01-02  
Seq
2014-8134  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181082 35346 CVE-2014-8134 SUSE-SU-2015:0481  View
181083 35346 CVE-2014-8134 openSUSE-SU-2015:0566  View
181084 35346 CVE-2014-8134 openSUSE-SU-2015:0714  View
181085 35346 CVE-2014-8134 SUSE-SU-2015:0736  View
181086 35346 CVE-2014-8134 http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8134.html  View
181087 35346 CVE-2014-8134 RHSA-2016:0855  View
181088 35346 CVE-2014-8134 http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
181089 35346 CVE-2014-8134 71650  View
181090 35346 CVE-2014-8134 [kvm] 20141205 [PATCH] x86, kvm: Clear paravirt_enabled on KVM guests for espfix32"s benefit  View
181091 35346 CVE-2014-8134 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1400314  View
181092 35346 CVE-2014-8134 https://bugzilla.novell.com/show_bug.cgi?id=909078  View
181093 35346 CVE-2014-8134 https://bugzilla.redhat.com/show_bug.cgi?id=1172765  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18343 JVNDB-2014-007218 Linux Kernel の arch/x86/kernel/kvm.c 内の paravirt_ops_setup 関数における ASLR 保護メカニズムを回避される脆弱性 Linux Kernel の arch/x86/kernel/kvm.c 内の paravirt_ops_setup 関数には、KVM ゲストカーネル用に不適切な paravirt_enabled 設定を使用するため、ASLR 保護メカニズムを回避される脆弱性が存在します。 CVE-2014-8134 75427 CVE-2014-8134 35346 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007218.html 2014-12-08 2014-12-17 View