NVD

Id
37944  
Name
CVE-2013-1796  
Description
The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2016-12-07  
Seq
2013-1796  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193710 37944 CVE-2013-1796 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c300aa64ddf57d9c5d9c898a64b36877345dd4a9  View
193711 37944 CVE-2013-1796 openSUSE-SU-2013:0847  View
193712 37944 CVE-2013-1796 openSUSE-SU-2013:0925  View
193713 37944 CVE-2013-1796 openSUSE-SU-2013:1187  View
193714 37944 CVE-2013-1796 RHSA-2013:0727  View
193715 37944 CVE-2013-1796 RHSA-2013:0744  View
193716 37944 CVE-2013-1796 RHSA-2013:0746  View
193717 37944 CVE-2013-1796 RHSA-2013:0928  View
193718 37944 CVE-2013-1796 RHSA-2013:1026  View
193719 37944 CVE-2013-1796 MDVSA-2013:176  View
193720 37944 CVE-2013-1796 [oss-security] 20130320 linux kernel: kvm: CVE-2013-179[6..8]  View
193721 37944 CVE-2013-1796 58607  View
193722 37944 CVE-2013-1796 USN-1805-1  View
193723 37944 CVE-2013-1796 USN-1808-1  View
193724 37944 CVE-2013-1796 USN-1809-1  View
193725 37944 CVE-2013-1796 USN-1812-1  View
193726 37944 CVE-2013-1796 USN-1813-1  View
193727 37944 CVE-2013-1796 https://bugzilla.redhat.com/show_bug.cgi?id=917012  View
193728 37944 CVE-2013-1796 https://github.com/torvalds/linux/commit/c300aa64ddf57d9c5d9c898a64b36877345dd4a9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20424 JVNDB-2013-001999 Linux Kernel の arch/x86/kvm/x86.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の arch/x86/kvm/x86.c 内の kvm_set_msr_common 関数は、MSR_KVM_SYSTEM_TIME 操作の際に、必要な time_page アライメントを確認しないため、サービス運用妨害 (バッファオーバーフローおよびホスト OS メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-1796 61738 CVE-2013-1796 37944 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001999.html 2013-03-22 2014-02-27 View