NVD

Id
43970  
Name
CVE-2012-2121  
Description
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS crash) by leveraging administrative access to the guest OS to conduct hotunplug and hotplug operations on devices.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-05-17  
Modified Date
2014-01-13  
Seq
2012-2121  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220937 43970 CVE-2012-2121 RHSA-2012:0743  View
220938 43970 CVE-2012-2121 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.4  View
220939 43970 CVE-2012-2121 [oss-security] 20120419 Re: CVE request -- kernel: kvm: device assignment page leak  View
220940 43970 CVE-2012-2121 1027083  View
220941 43970 CVE-2012-2121 USN-1577-1  View
220942 43970 CVE-2012-2121 USN-2036-1  View
220943 43970 CVE-2012-2121 USN-2037-1  View
220944 43970 CVE-2012-2121 https://bugzilla.redhat.com/show_bug.cgi?id=814149  View
220945 43970 CVE-2012-2121 https://github.com/torvalds/linux/commit/09ca8e1173bcb12e2a449698c9ae3b86a8a10195  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26749 JVNDB-2012-002456 Linux kernel の KVM の実装におけるサービス運用妨害 (ホスト OS クラッシュ) の脆弱性 Linux kernel の KVM の実装は、メモリスロットと IOMMU との関係を適切に管理しないため、サービス運用妨害 (ホスト OS クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-2121 55359 CVE-2012-2121 43970 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002456.html 2012-05-17 2012-05-18 View