CVE-2013-0311

Published Feb 22, 2013

Last updated 2 years ago

Overview

Description
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS privileges.
Source
secalert@redhat.com
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
6.5
Impact score
10
Exploitability score
2.5
Vector string
AV:A/AC:H/Au:S/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Evaluator

Comment
Per https://access.redhat.com/security/cve/CVE-2013-0311 "This issue did affect the version of Linux kernel as shipped with Red Hat Enterprise Linux 6."
Impact
-
Solution
-

Configurations