VDB-107130 · CVE-2017-1000252 · BID 101022

Linux Kernel up to 4.13.3 KVM Subsystem arch/x86/kvm/vmx.c input validation

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 4.13.3 (Operating System). Affected is some unknown functionality of the file arch/x86/kvm/vmx.c of the component KVM Subsystem. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820012	01/14/2021	VulD...	cvss2_nvd_basescore	2.1	nist.gov	01/14/2021	accepted	90
10820011	01/14/2021	VulD...	price_0day	$5k-$25k	see documentation	01/14/2021	accepted	90
10820010	01/14/2021	VulD...	person_name	Jan H. Schönherr	securityfocus.com	01/14/2021	accepted	70
7139259	11/19/2019	VulD...	securityfocus_class	Failure to Handle Exceptional Conditions	securityfocus.com	11/19/2019	accepted	100
7139258	11/19/2019	VulD...	securityfocus_date	1506384000 (09/26/2017)	securityfocus.com	11/19/2019	accepted	100
7139250	11/19/2019	VulD...	date	1505865600 (09/20/2017)		11/19/2019	accepted	100
7139247	11/19/2019	VulD...	confirm_url	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=36ae3c0a36b7456432fedce38ae2f7bd3e01a563	git.kernel.org	11/19/2019	accepted	100
7139246	11/19/2019	VulD...	company_name	Amazon		11/19/2019	accepted	100
7139205	11/19/2019	VulD...	discoverydate	1504742400		11/19/2019	accepted	100
7139283	09/26/2017	VulD...	cvss3_nvd_basescore	5.5	nist.gov	09/26/2017	accepted	90
7139282	09/26/2017	VulD...	0day_days	13		09/26/2017	accepted	90
7139281	09/26/2017	VulD...	cvss3_vuldb_rc	C		09/26/2017	accepted	90
7139280	09/26/2017	VulD...	cvss3_vuldb_rl	O		09/26/2017	accepted	90
7139279	09/26/2017	VulD...	cvss3_vuldb_e	X		09/26/2017	accepted	90
7139278	09/26/2017	VulD...	cvss2_vuldb_rc	C		09/26/2017	accepted	90
7139277	09/26/2017	VulD...	cvss2_vuldb_rl	OF		09/26/2017	accepted	90
7139276	09/26/2017	VulD...	cvss2_vuldb_e	ND		09/26/2017	accepted	90
7139274	09/26/2017	VulD...	seealso	106296 106737		09/26/2017	accepted	100
7139273	09/26/2017	VulD...	qualys_title	Red Hat Update for kernel (RHSA-2018:1130)	qualys.com	09/26/2017	accepted	100