CVE-2017-1000252

CVSS v3.0 5.5 (Medium)

CVSS v2.0 2.1 (Low)

EPSS 0.06 % (28^th)

Affected Products 1

Advisories 9

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service (assertion failure, and hypervisor hang or crash) via an out-of bounds guest_irq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c.

Weaknesses

CWE-20: Improper Input Validation
CWE-617: Reachable Assertion

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2017-09-26 05:29:00
(7 years ago)
Updated Date: 2019-10-03 00:03:26
(5 years ago)

Affected Products

Linux

Linux Kernel

Configuration #1

		CPE23	From	Up To
	Linux Kernel 4.13.3 and prior versions	cpe:2.3:o:linux:linux_kernel		<= 4.13.3