Veracode Vulnerability DatabaseVERACODE:24945Denial Of Service (DoS)
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
kernel is vulnerable to denial of service. A flaw was found in the way the KVM subsystem of a Linux kernel handled PIT (Programmable Interval Timer) IRQs (interrupt requests) when there was no virtual interrupt controller set up. A malicious user in the kvm group on the host could force this situation to occur, resulting in the host crashing.
References
lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
permalink.gmane.org/gmane.comp.emulators.kvm.devel/83564
www.openwall.com/lists/oss-security/2011/12/21/7
www.redhat.com/support/errata/RHSA-2012-0051.html
www.securityfocus.com/bid/51172
www.securitytracker.com/id?1026559
access.redhat.com/errata/RHSA-2012:0051
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=769721
Related
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C