PT-2013-6018 · Linux+2 · Linux Kernel+2

Lars Bull

·

Publicado

2013-12-14

·

Atualizado

2023-02-13

·

CVE-2013-6376

CVSS v2.0

5.2

Média

VetorAV:A/AC:M/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.6
Description The issue allows guest OS users to cause a denial of service, resulting in a host OS crash, by performing a crafted ICR write operation in x2apic mode. This is due to a problem in the recalculate apic map function.
Recommendations For versions prior to 3.12.6, update to version 3.12.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the recalculate apic map function in the KVM subsystem to minimize the risk of exploitation.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

ALT-PU-2013-1301
ALT-PU-2013-1302
ALT-PU-2013-1303
ALT-PU-2013-1312
ALT-PU-2014-1422
ALT-PU-2014-1547
CVE-2013-6376
MGASA-2013-0371
MGASA-2013-0373
MGASA-2013-0374
MGASA-2013-0375
MGASA-2014-0043
OPENSUSE-SU-2014_0204-1
OPENSUSE-SU-2014_0205-1
SUSE-RU-2015:0621-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
USN-2113-1
USN-2117-1
USN-2136-1

Produtos afetados

Alt Linux
Linux Kernel
Suse