Published: 12/12/2014 Updated: 13/02/2023

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 170

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel up to and including 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 16.04
canonical ubuntu linux 12.04
canonical ubuntu linux 14.04
opensuse evergreen 11.4
opensuse opensuse 13.1
suse suse linux enterprise server 11
oracle linux 6

Debian Bug report logs - #774155 linux: CVE-2014-9428: Remote crash of kernel via batman-adv module Package: linux; Maintainer for linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: conchur@webde Date: Mon, 29 Dec 2014 16:48:01 UTC Severity: important Tags: patch, security, upstream Found in versi ...

Several security issues were fixed in the kernel ...

USN-2448-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

USN-2447-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the kernel ...

NVD-CWE-noinfo http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8134.html http://www.spinics.net/lists/kvm/msg111458.html https://bugzilla.novell.com/show_bug.cgi?id=909078 https://bugzilla.redhat.com/show_bug.cgi?id=1172765 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1400314 http://secunia.com/advisories/62336 http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html http://rhn.redhat.com/errata/RHSA-2016-0855.html http://www.securityfocus.com/bid/71650 http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html https://support.f5.com/csp/article/K17120 https://support.f5.com/csp/article/K17120?utm_source=f5support&%3Butm_medium=RSS https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774155 https://nvd.nist.gov https://usn.ubuntu.com/2442-1/

CVE-2014-8134

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect