CVE-2014-8134

Published: Dec 12, 2014Modified: May 6, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for guest OS users to bypass the ASLR protection mechanism via a crafted application that reads a 16-bit value.

Affected (8)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Evergreen, Opensuse · +2 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Opensuse: Evergreen, Opensuse · Suse: Suse Linux Enterprise Server · Oracle: Linux

1 product

1 product

2 products

1 product

Suse Linux Enterprise Server

Oracle

1 product

Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 3.18

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Evergreen	Version 11.4
Opensuse Opensuse	Version 13.1
Suse Suse Linux Enterprise Server	Version 11 sp2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Linux	Version 6

References (30)

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00009.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8134.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-0855.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/62336

Source: secalert@redhat.com

Broken Link

http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/71650

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.spinics.net/lists/kvm/msg111458.html

Source: secalert@redhat.com

ExploitMailing ListPatchThird Party Advisory

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1400314

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.novell.com/show_bug.cgi?id=909078

Source: secalert@redhat.com

Permissions Required

https://bugzilla.redhat.com/show_bug.cgi?id=1172765

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://support.f5.com/csp/article/K17120

Source: secalert@redhat.com

Third Party Advisory

https://support.f5.com/csp/article/K17120?utm_source=f5support&amp%3Butm_medium=RSS

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html