CVE-2016-9777 in Linux Kernel
요약 (영어)
KVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the VCPU index, which allows guest OS users to gain host OS privileges or cause a denial of service (out-of-bounds array access and host OS crash) via a crafted interrupt request, related to arch/x86/kvm/ioapic.c and arch/x86/kvm/ioapic.h.
예약하다
2016. 12. 02.
공개
2016. 12. 28.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 94700 | Linux Kernel KVM 정보 공개 | 125 | 정의되지 않음 | 공식 수정 | CVE-2016-9777 |