Improper input validation in Linux Kernel
CVE-2013-4587
Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges via a large id value.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.005 (41.7th percentile) — read the EPSS interpretation.
Affected products
- Linux Linux_kernel
- Opensuse — versions 11.4, 12.3, 13.1
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List)
- secalert@redhat.com (x_refsource_CONFIRM, Mailing List, VDB Entry)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, VDB Entry, Third Party Advisory)