Lucene search

K
cvelistRedhatCVELIST:CVE-2014-0155
HistoryApr 14, 2014 - 11:00 p.m.

CVE-2014-0155

2014-04-1423:00:00
redhat
www.cve.org
5

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

39.4%

The ioapic_deliver function in virt/kvm/ioapic.c in the Linux kernel through 3.14.1 does not properly validate the kvm_irq_delivery_to_apic return value, which allows guest OS users to cause a denial of service (host OS crash) via a crafted entry in the redirection table of an I/O APIC. NOTE: the affected code was moved to the ioapic_service function before the vulnerability was announced.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

39.4%