PT-2016-5340 · Ibm+2 · Ibm Powerkvm+2

Published 2016-05-12 · Updated 2018-01-05 · CVE-2016-3044

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM PowerKVM versions 2.1 before 2.1.1.3-65.10 IBM PowerKVM versions 3.1 before 3.1.0.2

Description The issue allows guest OS users to cause a denial of service, resulting in a host OS infinite loop and hang, via unspecified vectors.

Recommendations For IBM PowerKVM version 2.1, update to version 2.1.1.3-65.10 or later. For IBM PowerKVM version 3.1, update to version 3.1.0.2 or later.

Fix

DoS

Improper Access Control

RCE

Weakness Enumeration

CWE-284

CWE-20

Related Identifiers

CESA-2016_1033

CESA-2016_2574

CVE-2016-3044

RHSA-2016:1033

RHSA-2016:2574

RHSA-2016_1033

RHSA-2016_2574

Affected Products

Centos

Ibm Powerkvm

Red Hat

References · 15

• https://security-tracker.debian.org/tracker/CVE-2016-3044 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=isg3T1023969 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-3044 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3044 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3044 · Security Note
• http://rhn.redhat.com/errata/RHSA-2016-1033.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-3044 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3044 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2574.html · Vendor Advisory
• http://securityfocus.com/bid/92123 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/114706 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ccec44563b18a0ce90e2d4f332784b3cb25c8e9c · Note
• https://www-01.ibm.com/support/docview.wss?uid=isg3T1023969 · Note
• http://securityfocus.com/bid/92123/info · Note