PT-2017-12369 · Linux +5 · Linux Kernel +5

🗓️ 20 Sep 2017 00:00:00Reported by Positive TechnologiesType

Linux kernel before 4.13.3 lets KVM L2 guests read/write CR8 due to missing vmcs02 controls.

Reporter	Title	Published	Views	Family All 10885
NVD	CVE-2015-9004	2 May 201721:59	–	nvd
NVD	CVE-2016-10229	4 Apr 201705:59	–	nvd
NVD	CVE-2016-3672	27 Apr 201617:59	–	nvd
NVD	CVE-2016-7913	16 Nov 201605:59	–	nvd
NVD	CVE-2016-8633	28 Nov 201603:59	–	nvd
NVD	CVE-2016-9604	11 Jul 201813:29	–	nvd
NVD	CVE-2017-1000111	5 Oct 201701:29	–	nvd
NVD	CVE-2017-1000112	5 Oct 201701:29	–	nvd
NVD	CVE-2017-1000251	12 Sep 201717:29	–	nvd
NVD	CVE-2017-1000252	26 Sep 201705:29	–	nvd

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ufo_privilege_escalation.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/local/rsh_stack_clash_priv_esc.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md
github	www.github.com/xairy/kernel-exploits/tree/master/CVE-2017-1000112
github	www.github.com/opsxcq/exploit-cve-2017-5715
github	www.github.com/hayzamjs/Blueborne-CVE-2017-1000251
github	www.github.com/es0j/CVE-2023-0045

12 Feb 2023 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.15.6 - 9.8

CVSS 210

CVSS 37.1 - 8.8

EPSS0.84172

SSVC