Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-0055
HistoryMar 26, 2014 - 2:55 p.m.

CVE-2014-0055

2014-03-2614:55:00
Debian Security Bug Tracker
security-tracker.debian.org
40

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%