CVE-2019-3887

Published Apr 9, 2019

Last updated 2 years ago

Overview

Description: A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.6
Impact score: 4
Exploitability score: 1.1
Vector string: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
Severity: MEDIUM

CVSS 3.0

Type: Secondary
Base score: 6.7
Impact score: 5.3
Exploitability score: 0.8
Vector string: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 4.7
Impact score: 6.9
Exploitability score: 3.4
Vector string: AV:L/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

secalert@redhat.com: CWE-863
nvd@nist.gov: CWE-863

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "70C736CC-2D30-4710-A0AE-3A146DF7C1D1",
            "versionStartIncluding": "4.16"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D100F7CE-FC64-4CC6-852A-6136D72DA419"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07C312A0-CD2C-4B9C-B064-6409B25C278F"
          },
          {
            "criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "92BC9265-6959-4D37-BE5E-8C45E98992F8"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "831F0F47-3565-4763-B16F-C87B1FF2035E"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0E3F09B5-569F-4C58-9FCA-3C0953D107B5"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CBF9BCF3-187F-410A-96CA-9C47D3ED6924"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E5CB3640-F55B-4127-875A-2F52D873D179"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "77C61DDC-81F3-4E2D-9CAA-17A256C85443"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B6B0DA79-DF12-4418-B075-F048C9E2979A"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B92409A9-0D6B-4B7E-8847-1B63837D201F"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C5C5860E-9FEB-4259-92FD-A85911E2F99E"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6897676D-53F9-45B3-B27F-7FF9A4C58D33"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E28F226A-CBC7-4A32-BE58-398FA5B42481"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B09ACF2D-D83F-4A86-8185-9569605D8EE1"
          },
          {
            "criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC10D919-57FD-4725-B8D2-39ECB476902F"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References