Published: 22/02/2013 Updated: 13/02/2023

CVSS v2 Base Score: 6.5 | Impact Score: 10 | Exploitability Score: 2.5

VMScore: 580

Vector: AV:A/AC:H/Au:S/C:C/I:C/A:C

The translate_desc function in drivers/vhost/vhost.c in the Linux kernel prior to 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.2.21
linux linux kernel 3.4.4
linux linux kernel 3.0.25
linux linux kernel 3.1.2
linux linux kernel 3.4.11
linux linux kernel 3.0
linux linux kernel 3.2.19
linux linux kernel 3.0.22
linux linux kernel 3.2.23
linux linux kernel 3.4.13
linux linux kernel 3.0.5
linux linux kernel 3.5.2
linux linux kernel 3.2.18
linux linux kernel 3.3
linux linux kernel 3.0.38
linux linux kernel 3.1
linux linux kernel 3.2.5
linux linux kernel 3.2.26
linux linux kernel 3.4
linux linux kernel 3.0.18
linux linux kernel 3.0.6
linux linux kernel 3.0.36
linux linux kernel 3.4.23
linux linux kernel
linux linux kernel 3.0.35
linux linux kernel 3.0.11
linux linux kernel 3.0.34
linux linux kernel 3.5.7
linux linux kernel 3.0.32
linux linux kernel 3.2
linux linux kernel 3.4.18
linux linux kernel 3.4.6
linux linux kernel 3.2.16
linux linux kernel 3.4.12
linux linux kernel 3.3.2
linux linux kernel 3.0.19
linux linux kernel 3.2.27
linux linux kernel 3.0.37
linux linux kernel 3.0.4
linux linux kernel 3.3.8
linux linux kernel 3.0.27
linux linux kernel 3.3.3
linux linux kernel 3.4.5
linux linux kernel 3.2.11
linux linux kernel 3.0.42
linux linux kernel 3.0.23
linux linux kernel 3.2.10
linux linux kernel 3.0.8
linux linux kernel 3.2.14
linux linux kernel 3.4.14
linux linux kernel 3.3.4
linux linux kernel 3.2.29
linux linux kernel 3.0.40
linux linux kernel 3.4.19
linux linux kernel 3.0.33
linux linux kernel 3.4.9
linux linux kernel 3.0.28
linux linux kernel 3.5.6
linux linux kernel 3.3.6
linux linux kernel 3.6.9
linux linux kernel 3.2.25
linux linux kernel 3.2.4
linux linux kernel 3.4.15
linux linux kernel 3.0.13
linux linux kernel 3.4.3
linux linux kernel 3.2.9
linux linux kernel 3.0.10
linux linux kernel 3.2.15
linux linux kernel 3.0.1
linux linux kernel 3.1.6
linux linux kernel 3.6.10
linux linux kernel 3.2.20
linux linux kernel 3.2.24
linux linux kernel 3.4.24
linux linux kernel 3.2.6
linux linux kernel 3.2.2
linux linux kernel 3.0.17
linux linux kernel 3.1.3
linux linux kernel 3.1.9
linux linux kernel 3.0.44
linux linux kernel 3.0.16
linux linux kernel 3.5.5
linux linux kernel 3.2.13
linux linux kernel 3.0.21
linux linux kernel 3.0.7
linux linux kernel 3.4.10
linux linux kernel 3.1.5
linux linux kernel 3.1.8
linux linux kernel 3.2.1
linux linux kernel 3.2.7
linux linux kernel 3.5.3
linux linux kernel 3.0.20
linux linux kernel 3.0.24
linux linux kernel 3.3.5
linux linux kernel 3.4.8
linux linux kernel 3.5.4
linux linux kernel 3.0.15
linux linux kernel 3.2.30
linux linux kernel 3.0.39
linux linux kernel 3.0.2
linux linux kernel 3.4.20
linux linux kernel 3.5.1
linux linux kernel 3.4.2
linux linux kernel 3.1.7
linux linux kernel 3.1.1
linux linux kernel 3.4.1
linux linux kernel 3.3.7
linux linux kernel 3.0.12
linux linux kernel 3.2.22
linux linux kernel 3.2.17
linux linux kernel 3.4.16
linux linux kernel 3.4.22
linux linux kernel 3.2.8
linux linux kernel 3.1.10
linux linux kernel 3.3.1
linux linux kernel 3.0.3
linux linux kernel 3.0.9
linux linux kernel 3.0.26
linux linux kernel 3.1.4
linux linux kernel 3.0.43
linux linux kernel 3.0.30
linux linux kernel 3.0.31
linux linux kernel 3.0.29
linux linux kernel 3.2.12
linux linux kernel 3.4.17
linux linux kernel 3.2.28
linux linux kernel 3.0.14
linux linux kernel 3.4.7
linux linux kernel 3.4.21
linux linux kernel 3.2.3
linux linux kernel 3.0.41
redhat enterprise linux 6.0

Synopsis Important: Red Hat Enterprise Linux 6 kernel update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues, address severalhundred bugs, and add numerous enhancements are now available as part ofthe ongoing support and maintenance of Red Hat Enter ...

Synopsis Important: rhev-hypervisor6 security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An updated rhev-hypervisor6 package that fixes three security issues,various bugs, and adds an enhancement is now availableThe Red Hat Security Response Team has rated this update ...

Several security issues were fixed in the kernel ...

NVD-CWE-Other https://github.com/torvalds/linux/commit/bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 http://www.openwall.com/lists/oss-security/2013/02/20/6 http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.7.bz2 https://bugzilla.redhat.com/show_bug.cgi?id=912905 http://rhn.redhat.com/errata/RHSA-2013-0496.html http://rhn.redhat.com/errata/RHSA-2013-0579.html http://rhn.redhat.com/errata/RHSA-2013-0882.html http://rhn.redhat.com/errata/RHSA-2013-0928.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bd97120fc3d1a11f3124c7c9ba1d91f51829eb85 https://access.redhat.com/errata/RHSA-2013:0496 https://nvd.nist.gov https://usn.ubuntu.com/1778-1/

Get Started

CVE-2013-0311

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect