CVE-2013-1798

Published: Mar 22, 2013Modified: Apr 29, 2026

6.2

Vector

AV:A/AC:H/Au:N/C:C/I:N/A:C

Exploitability: 3.2 / Impact: 9.2

Source: NVD

Description

The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.

Affected (5)

Products: Linux: Linux Kernel

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.8.4
Linux Linux Kernel	Version 3.8.0
Linux Linux Kernel	Version 3.8.1
Linux Linux Kernel	Version 3.8.2
Linux Linux Kernel	Version 3.8.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (34)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2c118bfab8bc6b8bb213abfc35201e441693d55

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: secalert@redhat.com

http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0727.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0744.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0746.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0928.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-1026.html

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/03/20/9

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1809-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1812-1

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1813-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=917017

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55

Source: secalert@redhat.com

ExploitPatch

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a2c118bfab8bc6b8bb213abfc35201e441693d55

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.com/files/157233/Kernel-Live-Patch-Security-Notice-LSN-0065-1.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0727.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0744.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0746.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0928.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1026.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/03/20/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1809-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1812-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1813-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=917017

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.