Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0055
HistoryMar 26, 2014 - 2:00 p.m.

CVE-2014-0055

2014-03-2614:00:00
redhat
www.cve.org
2

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.