NVD

Id
36658  
Name
CVE-2013-0311  
Description
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.5  
CVSS Vector
(AV:A/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-02-21  
Modified Date
2013-08-22  
Seq
2013-0311  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187344 36658 CVE-2013-0311 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85  View
187345 36658 CVE-2013-0311 openSUSE-SU-2013:1187  View
187346 36658 CVE-2013-0311 RHSA-2013:0496  View
187347 36658 CVE-2013-0311 RHSA-2013:0579  View
187348 36658 CVE-2013-0311 RHSA-2013:0882  View
187349 36658 CVE-2013-0311 RHSA-2013:0928  View
187350 36658 CVE-2013-0311 http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2  View
187351 36658 CVE-2013-0311 MDVSA-2013:176  View
187352 36658 CVE-2013-0311 [oss-security] 20130219 Re: CVE request -- Linux kernel: vhost: fix length for cross region descriptor  View
187353 36658 CVE-2013-0311 https://bugzilla.redhat.com/show_bug.cgi?id=912905  View
187354 36658 CVE-2013-0311 https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20066 JVNDB-2013-001641 Linux Kernel の drivers/vhost/vhost.c における ホスト OS 権限を取得される脆弱性 Linux Kernel の drivers/vhost/vhost.c 内の translate_desc 関数には、cross-region 記述子を適切に処理しないため、ホスト OS 権限を取得される脆弱性が存在します。 CVE-2013-0311 60253 CVE-2013-0311 36658 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001641.html 2013-02-22 2013-06-27 View