CVE-2017-1000252medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.
References
http://www.debian.org/security/2017/dsa-3981
http://www.openwall.com/lists/oss-security/2017/09/15/4
http://www.securityfocus.com/bid/101022
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2018:1130
https://bugzilla.redhat.com/show_bug.cgi?id=1490781
https://github.com/torvalds/linux/commit/36ae3c0a36b7456432fedce38ae2f7bd3e01a563
https://github.com/torvalds/linux/commit/3a8b0677fc6180a467e26cc32ce6b0c09a32f9bb
Details
Source: MITRE
Published: 2017-09-26
Updated: 2019-10-03
Type: CWE-20
Risk Information
CVSS v2
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3
Base Score: 5.5
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.13.3 (inclusive)
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 127281 | NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0074) | Nessus | NewStart CGSL Local Security Checks | critical |
| 127272 | NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2019-0070) | Nessus | NewStart CGSL Local Security Checks | critical |
| 124987 | EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1534) | Nessus | Huawei Local Security Checks | high |
| 124953 | EulerOS Virtualization 3.0.1.0 : kvm (EulerOS-SA-2019-1450) | Nessus | Huawei Local Security Checks | high |
| 124821 | EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1498) | Nessus | Huawei Local Security Checks | high |
| 109449 | Scientific Linux Security Update : kernel on SL7.x x86_64 (20180410) (Meltdown) | Nessus | Scientific Linux Local Security Checks | critical |
| 109380 | CentOS 7 : kernel (CESA-2018:1062) | Nessus | CentOS Local Security Checks | critical |
| 109116 | RHEL 7 : kernel (RHSA-2018:1130) | Nessus | Red Hat Local Security Checks | critical |
| 109113 | Oracle Linux 7 : kernel (ELSA-2018-1062) | Nessus | Oracle Linux Local Security Checks | critical |
| 108997 | RHEL 7 : kernel (RHSA-2018:1062) | Nessus | Red Hat Local Security Checks | critical |
| 108984 | RHEL 7 : kernel-rt (RHSA-2018:0676) | Nessus | Red Hat Local Security Checks | critical |
| 104319 | Ubuntu 16.04 LTS : linux-gcp vulnerabilities (USN-3468-3) | Nessus | Ubuntu Local Security Checks | high |
| 104318 | Ubuntu 16.04 LTS : linux-hwe vulnerabilities (USN-3468-2) | Nessus | Ubuntu Local Security Checks | high |
| 104317 | Ubuntu 17.04 : linux, linux-raspi2 vulnerabilities (USN-3468-1) | Nessus | Ubuntu Local Security Checks | high |
| 104253 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:2869-1) (KRACK) | Nessus | SuSE Local Security Checks | high |
| 104171 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2017:2847-1) (KRACK) | Nessus | SuSE Local Security Checks | high |
| 104075 | openSUSE Security Update : the Linux Kernel (openSUSE-2017-1160) | Nessus | SuSE Local Security Checks | high |
| 104074 | openSUSE Security Update : the Linux Kernel (openSUSE-2017-1159) | Nessus | SuSE Local Security Checks | high |
| 103365 | Debian DSA-3981-1 : linux - security update (BlueBorne) (Stack Clash) | Nessus | Debian Local Security Checks | high |