cbcvebase.
CVE-2014-3647
published 2014-11-10

CVE-2014-3647: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a…

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

Affected

14 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
debiandebian_linux
debianlinux< linux 3.16.7-1 (bookworm)linux 3.16.7-1 (bookworm)
linuxlinux_kernel<= 3.17.2
linuxlinux_kernel>= 0 < 3.16.7-13.16.7-1
linuxlinux_kernel>= 0 < 3.16.7-13.16.7-1
linuxlinux_kernel>= 0 < 3.16.7-13.16.7-1
linuxlinux_kernel>= 0 < 3.16.7-13.16.7-1
linuxlinux_kernel>= 0 < 3.13.0-39.663.13.0-39.66
opensuseevergreen
oraclelinux
redhatenterprise_linux
redhatenterprise_linux
susesuse_linux_enterprise_server

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.9MEDIUM