Lucene search

K
nvd[email protected]NVD:CVE-2014-0055
HistoryMar 26, 2014 - 2:55 p.m.

CVE-2014-0055

2014-03-2614:55:04
web.nvd.nist.gov
1

5.5 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which allows guest OS users to cause a denial of service (host OS crash) via unspecified vectors.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch6.0

5.5 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%