Debian DSA-1962-1 : kvm - several vulnerabilities

Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3638 It was discovered an Integer overflow in the kvmdevioctlgetsupportedcpuid function. This allows local users to ha...

Linux Kernel KVM handle_dr()本地拒绝服务漏洞

BUGTRAQ ID: 37221 CVECAN ID: CVE-2009-3722 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel KVM子系统中arch/x86/kvm/vmx.c文件的handledr函数在访问调试寄存器之前没有正确地验证当前权限级别（CPL），这可能允许guest操作系统用户通过特制的应用程序导致host操作系统拒绝服务。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Design/Logic Flaw

The handledr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level CPL before accessing a debug register, which allows guest OS users to cause a denial of service trap on the host OS via a crafted application...

PT-2009-5979 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31.1 Description: The issue is related to the handle dr function in the KVM subsystem, which does not properly verify the Current Privilege Level CPL before accessing a debug register. This allows guest OS...