NVD

Id
49535  
Name
CVE-2009-2287  
Description
The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2009-07-01  
Modified Date
2012-03-19  
Seq
2009-2287  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250473 49535 CVE-2009-2287 http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git;a=blob;f=queue-2.6.30/kvm-x86-check-for-cr3-validity-in-ioctl_set_sregs.patch;h=b48a47dad2cf76358b327368f80c0805e6370c68;hb=e7c45b24f298b5d9efd7d401150f64a1b51aaac4  View
250474 49535 CVE-2009-2287 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=59839dfff5eabca01cc4e20b45797a60a80af8cb  View
250475 49535 CVE-2009-2287 http://sourceforge.net/tracker/?func=detail&atid=893831&aid=2687641&group_id=180599  View
250476 49535 CVE-2009-2287 DSA-1845  View
250477 49535 CVE-2009-2287 MDVSA-2010:198  View
250478 49535 CVE-2009-2287 [oss-security] 20090630 CVE Request: kernel: kvm: failure to validate cr3 after KVM_SET_SREGS  View
250479 49535 CVE-2009-2287 USN-807-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41135 JVNDB-2009-002142 x86 システム上で稼働している Linux kernel の KVM サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の KVM サブシステムにある kvm_arch_vcpu_ioctl_set_sregs 関数には、x86 システム上で稼働している場合、KVM_SET_SREGS の呼び出しの際にページテーブルの root を正しく検証しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-2287 39718 CVE-2009-2287 49535 4.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002142.html 2009-07-01 2009-10-26 View