Lucene search

K
cve[email protected]CVE-2011-4622
HistoryJan 27, 2012 - 3:55 p.m.

CVE-2011-4622

2012-01-2715:55:00
NVD-CWE-noinfo
web.nvd.nist.gov
45
kvm
83
create_pit_timer
arch
x86
kvm
i8254.c
vulnerability
nvd
cve-2011-4622
null pointer dereference
denial of service

6.2 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.

CPENameOperatorVersion
redhat:kvmredhat kvmeq83

6.2 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%