PT-2013-3478 · Linux+2 · Kvm+2
Publicado
2013-06-10
·
Atualizado
2019-04-22
·
CVE-2013-1935
CVSS v2.0
5.7
Média
| Vetor | AV:A/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6
Description
The issue is related to a certain Red Hat patch to the KVM subsystem in the kernel package, which does not properly implement the PV EOI feature. This allows guest OS users to cause a denial of service by leveraging a time window during which interrupts are disabled but
copy to user function calls are possible, resulting in a host OS crash.Recommendations
For Red Hat Enterprise Linux (RHEL) 6 kernel package versions prior to 2.6.32-358.11.1.el6, update to version 2.6.32-358.11.1.el6 or later to resolve the issue.
Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Kvm
Red Hat