Published: 22/03/2013 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 10 | Exploitability Score: 3.2

VMScore: 606

Vector: AV:A/AC:H/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel up to and including 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.8.2
linux linux kernel 3.8.0
linux linux kernel
linux linux kernel 3.8.1
linux linux kernel 3.8.3

Synopsis Important: rhev-hypervisor6 security and bug fix update Type/Severity Security Advisory: Important Topic An updated rhev-hypervisor6 package that fixes several security issues andvarious bugs is now availableThe Red Hat Security Response Team has rated this update as havingimportant security impac ...

Synopsis Important: kvm security update Type/Severity Security Advisory: Important Topic Updated kvm packages that fix three security issues are now available forRed Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerability Scori ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic Updated kernel packages that fix multiple security issues and several bugsare now available for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as havingimportant secur ...

Several security issues were fixed in the kernel ...

CWE-399 https://bugzilla.redhat.com/show_bug.cgi?id=917013 https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1 http://www.openwall.com/lists/oss-security/2013/03/20/9 http://www.ubuntu.com/usn/USN-1813-1 http://www.ubuntu.com/usn/USN-1812-1 http://rhn.redhat.com/errata/RHSA-2013-0744.html http://rhn.redhat.com/errata/RHSA-2013-0727.html http://www.ubuntu.com/usn/USN-1809-1 http://rhn.redhat.com/errata/RHSA-2013-0746.html http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html http://rhn.redhat.com/errata/RHSA-2013-0928.html http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://rhn.redhat.com/errata/RHSA-2013-1026.html http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2013:0746 https://usn.ubuntu.com/1809-1/

CVE-2013-1797

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect