CVE-2014-0049

2014-03-1100:00:00

ubuntu.com

7.4 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

66.0%

JSON

Buffer overflow in the complete_emulated_mmio function in
arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users
to execute arbitrary code on the host OS by leveraging a loop that triggers
an invalid memory copy affecting certain cancel_work_item data.

Bugs

<https://launchpad.net/bugs/1289728>

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels

OSVersionArchitecturePackageVersionFilename
ubuntu12.10noarchlinux< 3.5.0-49.73UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-20.34UNKNOWN
ubuntu12.10noarchlinux-armadaxp< 3.5.0-1630.39UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-49.73~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-39.57~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-20.34~precise1UNKNOWN
ubuntu12.10noarchlinux-ti-omap4< 3.5.0-241.57UNKNOWN
ubuntu13.10noarchlinux-ti-omap4< 3.5.0-241.57UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.10	noarch	linux	< 3.5.0-49.73	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-20.34	UNKNOWN
ubuntu	12.10	noarch	linux-armadaxp	< 3.5.0-1630.39	UNKNOWN
ubuntu	12.04	noarch	linux-lts-quantal	< 3.5.0-49.73~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-39.57~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-20.34~precise1	UNKNOWN
ubuntu	12.10	noarch	linux-ti-omap4	< 3.5.0-241.57	UNKNOWN
ubuntu	13.10	noarch	linux-ti-omap4	< 3.5.0-241.57	UNKNOWN