![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2017-2596 |
Description: | The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references. |
Test IDs: | 1.3.6.1.4.1.25623.1.0.703791 1.3.6.1.4.1.25623.1.0.872344 1.3.6.1.4.1.25623.1.0.872370 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2017-2596 95878 http://www.securityfocus.com/bid/95878 DSA-3791 http://www.debian.org/security/2017/dsa-3791 RHSA-2017:1842 https://access.redhat.com/errata/RHSA-2017:1842 RHSA-2017:2077 https://access.redhat.com/errata/RHSA-2017:2077 [oss-security] 20170131 CVE-2017-2596 Kernel: kvm: page reference leakage in handle_vmon http://www.openwall.com/lists/oss-security/2017/01/31/4 https://bugzilla.redhat.com/show_bug.cgi?id=1417812 https://bugzilla.redhat.com/show_bug.cgi?id=1417812 |