NVD

Id
37946  
Name
CVE-2013-1798  
Description
The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:C/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-03-22  
Modified Date
2014-01-27  
Seq
2013-1798  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
193745 37946 CVE-2013-1798 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=a2c118bfab8bc6b8bb213abfc35201e441693d55  View
193746 37946 CVE-2013-1798 openSUSE-SU-2013:0847  View
193747 37946 CVE-2013-1798 openSUSE-SU-2013:0925  View
193748 37946 CVE-2013-1798 openSUSE-SU-2013:1187  View
193749 37946 CVE-2013-1798 RHSA-2013:0727  View
193750 37946 CVE-2013-1798 RHSA-2013:0744  View
193751 37946 CVE-2013-1798 RHSA-2013:0746  View
193752 37946 CVE-2013-1798 RHSA-2013:0928  View
193753 37946 CVE-2013-1798 RHSA-2013:1026  View
193754 37946 CVE-2013-1798 MDVSA-2013:176  View
193755 37946 CVE-2013-1798 [oss-security] 20130320 linux kernel: kvm: CVE-2013-179[6..8]  View
193756 37946 CVE-2013-1798 USN-1809-1  View
193757 37946 CVE-2013-1798 USN-1812-1  View
193758 37946 CVE-2013-1798 USN-1813-1  View
193759 37946 CVE-2013-1798 https://bugzilla.redhat.com/show_bug.cgi?id=917017  View
193760 37946 CVE-2013-1798 https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20426 JVNDB-2013-002001 Linux Kernel の virt/kvm/ioapic.c における重要な情報を取得される脆弱性 Linux Kernel の virt/kvm/ioapic.c 内の ioapic_read_indirect 関数は、不正な IOAPIC_REG_SELECT、および IOAPIC_REG_WINDOW に関連した特定の操作の組み合わせを適切に処理しないため、ホスト OS メモリから重要な情報を取得される、またはサービス運用妨害 (ホスト OS OOPS) 状態にされる脆弱性が存在します。 CVE-2013-1798 61740 CVE-2013-1798 37946 6.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002001.html 2013-03-22 2014-02-27 View