Published: 27/01/2012 Updated: 29/12/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat kvm 83

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated kernel packages that fix various security issues and several bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity ...

Synopsis Important: kvm security update Type/Severity Security Advisory: Important Topic Updated kvm packages that fix two security issues are now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerability Scoring ...

A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names A local, unprivileged user could use this flaw to cause a denial of service or escalate their privileges by mounting a specially-crafted disk (CVE-2011-4077, Moderate) Flaws in ghash_update() and ghash_final() co ...

Several security issues were fixed in the kernel ...

NVD-CWE-noinfo http://permalink.gmane.org/gmane.comp.emulators.kvm.devel/83564 http://www.redhat.com/support/errata/RHSA-2012-0051.html http://www.openwall.com/lists/oss-security/2011/12/21/7 https://bugzilla.redhat.com/show_bug.cgi?id=769721 http://www.securitytracker.com/id?1026559 http://www.securityfocus.com/bid/51172 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html https://access.redhat.com/errata/RHSA-2012:0350 https://nvd.nist.gov https://usn.ubuntu.com/1361-1/https://alas.aws.amazon.com/ALAS-2012-55.html

CVE-2011-4622

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect