CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:H/Au:S/C:C/I:C/A:C
EPSS
Percentile
26.7%
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel
before 3.7 does not properly handle cross-region descriptors, which allows
guest OS users to obtain host OS privileges by leveraging KVM guest OS
privileges.
Author | Note |
---|---|
apw | this is a bug in the vhost driver which was introduced in this commit: 3a4d5c94e959359ece6d6b55045c3f046677f55c |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 11.10 | noarch | linux | < 3.0.0-32.50 | UNKNOWN |
ubuntu | 12.04 | noarch | linux | < 3.2.0-39.62 | UNKNOWN |
ubuntu | 12.10 | noarch | linux | < 3.5.0-26.42 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-armadaxp | < 3.2.0-1615.23 | UNKNOWN |
ubuntu | 12.10 | noarch | linux-armadaxp | < 3.5.0-1611.17 | UNKNOWN |
ubuntu | 10.04 | noarch | linux-lts-backport-oneiric | < 3.0.0-32.50~lucid1 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-lts-quantal | < 3.5.0-26.42~precise1 | UNKNOWN |
ubuntu | 11.10 | noarch | linux-ti-omap4 | < 3.0.0-1222.36 | UNKNOWN |
ubuntu | 12.04 | noarch | linux-ti-omap4 | < 3.2.0-1427.36 | UNKNOWN |
ubuntu | 12.10 | noarch | linux-ti-omap4 | < 3.5.0-221.31 | UNKNOWN |
www.openwall.com/lists/oss-security/2013/02/19
launchpad.net/bugs/cve/CVE-2013-0311
nvd.nist.gov/vuln/detail/CVE-2013-0311
security-tracker.debian.org/tracker/CVE-2013-0311
ubuntu.com/security/notices/USN-1756-1
ubuntu.com/security/notices/USN-1760-1
ubuntu.com/security/notices/USN-1767-1
ubuntu.com/security/notices/USN-1768-1
ubuntu.com/security/notices/USN-1769-1
ubuntu.com/security/notices/USN-1774-1
ubuntu.com/security/notices/USN-1778-1
ubuntu.com/security/notices/USN-1781-1
www.cve.org/CVERecord?id=CVE-2013-0311