NVD

Id
40171  
Name
CVE-2013-4587  
Description
Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-14  
Modified Date
2014-03-16  
Seq
2013-4587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204420 40171 CVE-2013-4587 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=338c7dbadd2671189cec7faf64c84d01071b3f96  View
204421 40171 CVE-2013-4587 openSUSE-SU-2014:0204  View
204422 40171 CVE-2013-4587 openSUSE-SU-2014:0205  View
204423 40171 CVE-2013-4587 openSUSE-SU-2014:0247  View
204424 40171 CVE-2013-4587 [oss-security] 20131212 Re: [vs-plain] kvm issues  View
204425 40171 CVE-2013-4587 USN-2109-1  View
204426 40171 CVE-2013-4587 USN-2110-1  View
204427 40171 CVE-2013-4587 USN-2113-1  View
204428 40171 CVE-2013-4587 USN-2117-1  View
204429 40171 CVE-2013-4587 USN-2128-1  View
204430 40171 CVE-2013-4587 USN-2129-1  View
204431 40171 CVE-2013-4587 USN-2135-1  View
204432 40171 CVE-2013-4587 USN-2136-1  View
204433 40171 CVE-2013-4587 USN-2138-1  View
204434 40171 CVE-2013-4587 USN-2139-1  View
204435 40171 CVE-2013-4587 USN-2141-1  View
204436 40171 CVE-2013-4587 https://bugzilla.redhat.com/show_bug.cgi?id=1030986  View
204437 40171 CVE-2013-4587 https://github.com/torvalds/linux/commit/338c7dbadd2671189cec7faf64c84d01071b3f96  View
204438 40171 CVE-2013-4587 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23978 JVNDB-2013-005553 Linux Kernel の KVM サブシステムの virt/kvm/kvm_main.c における権限を取得される脆弱性 Linux Kernel の KVM サブシステムの virt/kvm/kvm_main.c 内の kvm_vm_ioctl_create_vcpu 関数には、配列のインデックスエラーにより、権限を取得される脆弱性が存在します。 CVE-2013-4587 64529 CVE-2013-4587 40171 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005553.html 2013-12-12 2014-03-10 View