Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-0055
HistoryMar 26, 2014 - 2:55 p.m.

Design/Logic Flaw

2014-03-2614:55:00
PRIOn knowledge base
www.prio-n.com
5

6.6 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

24.6%

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

CPENameOperatorVersion
enterprise_linuxeq6.0

6.6 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

24.6%