6.2 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:H/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
67.8%
CentOS Errata and Security Advisory CESA-2014:0163
KVM (Kernel-based Virtual Machine) is a full virtualization solution for
Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for
the standard Red Hat Enterprise Linux kernel.
A divide-by-zero flaw was found in the apic_get_tmcct() function in KVM’s
Local Advanced Programmable Interrupt Controller (LAPIC) implementation.
A privileged guest user could use this flaw to crash the host.
(CVE-2013-6367)
A memory corruption flaw was discovered in the way KVM handled virtual APIC
accesses that crossed a page boundary. A local, unprivileged user could use
this flaw to crash the system or, potentially, escalate their privileges on
the system. (CVE-2013-6368)
Red Hat would like to thank Andrew Honig of Google for reporting these
issues.
All kvm users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. Note: the procedure in
the Solution section must be performed before this update will take effect.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2014-February/082316.html
Affected packages:
kmod-kvm
kmod-kvm-debug
kvm
kvm-qemu-img
kvm-tools
Upstream details at:
https://access.redhat.com/errata/RHSA-2014:0163
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | x86_64 | kmod-kvm | < 83-266.el5.centos.1 | kmod-kvm-83-266.el5.centos.1.x86_64.rpm |
CentOS | 5 | x86_64 | kmod-kvm-debug | < 83-266.el5.centos.1 | kmod-kvm-debug-83-266.el5.centos.1.x86_64.rpm |
CentOS | 5 | x86_64 | kvm | < 83-266.el5.centos.1 | kvm-83-266.el5.centos.1.x86_64.rpm |
CentOS | 5 | x86_64 | kvm-qemu-img | < 83-266.el5.centos.1 | kvm-qemu-img-83-266.el5.centos.1.x86_64.rpm |
CentOS | 5 | x86_64 | kvm-tools | < 83-266.el5.centos.1 | kvm-tools-83-266.el5.centos.1.x86_64.rpm |