ALT Linux Team

Package kernel-src-kvm update in p7 on 2013-12-20

ALT-PU-2013-1309-1

Package kernel-src-kvm updated to version 3.10.21-alt1 for branch p7 in task 110736.

Closed vulnerabilities

Published: 2013-12-14

BDU:2014-00094

Уязвимость операционной системы Linux, позволяющая злоумышленнику повысить свои привилегии

Severity: HIGH (7.2) Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References:
Published: 2013-12-14

BDU:2014-00095

Уязвимость операционной системы Linux, позволяющая злоумышленнику вызвать отказ в обслуживании

Severity: MEDIUM (5.7) Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-4587

Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.

Severity: HIGH (7.2) Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-6367

The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value.

Severity: MEDIUM (5.7) Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-6368

The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.

Severity: MEDIUM (6.2) Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
References:
Published: 2013-12-14
Modified: 2025-04-11

CVE-2013-6376

The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (host OS crash) via a crafted ICR write operation in x2apic mode.

Severity: MEDIUM (5.2) Vector: AV:A/AC:M/Au:S/C:N/I:N/A:C
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top