rhsa-2010_0126
Vulnerability from csaf_redhat
Published
2010-03-01 19:23
Modified
2024-11-14 10:48
Summary
Red Hat Security Advisory: kvm security and bug fix update

Notes

Topic
Updated kvm packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A flaw was found in the way the x86 emulator loaded segment selectors (used for memory segmentation and protection) into segment registers. In some guest system configurations, an unprivileged guest user could leverage this flaw to crash the guest or possibly escalate their privileges within the guest. (CVE-2010-0419) The x86 emulator implementation was missing a check for the Current Privilege Level (CPL) while accessing debug registers. An unprivileged user in a guest could leverage this flaw to crash the guest. (CVE-2009-3722) This update also fixes the following bugs: With Red Hat Enterprise Virtualization, the virtio_blk_dma_restart_bh() function was previously used to handle write errors; however, a bug fix provided by the RHSA-2009:1659 update meant that read errors would also have to be handled by this function. The function was not updated for this, causing read errors to be resubmitted as writes. This caused guest image corruption in some cases. Additionally, the return values of the bdrv_aio_write() and bdrv_aio_read() functions were ignored. If an immediate failure occurred in one of these functions, errors would be missed and the guest could hang or read corrupted data. (BZ#562776) All KVM users should upgrade to these updated packages, which contain backported patches to resolve these issues. Note: The procedure in the Solution section must be performed before this update will take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kvm packages that fix two security issues and two bugs are now\navailable for Red Hat Enterprise Linux 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for\nthe standard Red Hat Enterprise Linux kernel.\n\nA flaw was found in the way the x86 emulator loaded segment selectors (used\nfor memory segmentation and protection) into segment registers. In some\nguest system configurations, an unprivileged guest user could leverage this\nflaw to crash the guest or possibly escalate their privileges within the\nguest. (CVE-2010-0419)\n\nThe x86 emulator implementation was missing a check for the Current\nPrivilege Level (CPL) while accessing debug registers. An unprivileged\nuser in a guest could leverage this flaw to crash the guest.\n(CVE-2009-3722)\n\nThis update also fixes the following bugs:\n\nWith Red Hat Enterprise Virtualization, the virtio_blk_dma_restart_bh()\nfunction was previously used to handle write errors; however, a bug fix\nprovided by the RHSA-2009:1659 update meant that read errors would also\nhave to be handled by this function. The function was not updated for this,\ncausing read errors to be resubmitted as writes. This caused guest image\ncorruption in some cases.\n\nAdditionally, the return values of the bdrv_aio_write() and bdrv_aio_read()\nfunctions were ignored. If an immediate failure occurred in one of these\nfunctions, errors would be missed and the guest could hang or read\ncorrupted data. (BZ#562776)\n\nAll KVM users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. Note: The procedure in the\nSolution section must be performed before this update will take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2010:0126",
        "url": "https://access.redhat.com/errata/RHSA-2010:0126"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#important",
        "url": "http://www.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "531660",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=531660"
      },
      {
        "category": "external",
        "summary": "562776",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=562776"
      },
      {
        "category": "external",
        "summary": "563463",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=563463"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0126.json"
      }
    ],
    "title": "Red Hat Security Advisory: kvm security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-14T10:48:27+00:00",
      "generator": {
        "date": "2024-11-14T10:48:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2010:0126",
      "initial_release_date": "2010-03-01T19:23:00+00:00",
      "revision_history": [
        {
          "date": "2010-03-01T19:23:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2010-03-01T14:23:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:48:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
                  "product_id": "5Client-VT",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux Virtualization (v. 5 server)",
                  "product_id": "5Server-VT",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-tools-0:83-105.el5_4.27.x86_64",
                "product": {
                  "name": "kvm-tools-0:83-105.el5_4.27.x86_64",
                  "product_id": "kvm-tools-0:83-105.el5_4.27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-tools@83-105.el5_4.27?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-debuginfo-0:83-105.el5_4.27.x86_64",
                "product": {
                  "name": "kvm-debuginfo-0:83-105.el5_4.27.x86_64",
                  "product_id": "kvm-debuginfo-0:83-105.el5_4.27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-debuginfo@83-105.el5_4.27?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-0:83-105.el5_4.27.x86_64",
                "product": {
                  "name": "kmod-kvm-0:83-105.el5_4.27.x86_64",
                  "product_id": "kmod-kvm-0:83-105.el5_4.27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm@83-105.el5_4.27?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-0:83-105.el5_4.27.x86_64",
                "product": {
                  "name": "kvm-0:83-105.el5_4.27.x86_64",
                  "product_id": "kvm-0:83-105.el5_4.27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-105.el5_4.27?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-qemu-img-0:83-105.el5_4.27.x86_64",
                "product": {
                  "name": "kvm-qemu-img-0:83-105.el5_4.27.x86_64",
                  "product_id": "kvm-qemu-img-0:83-105.el5_4.27.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-qemu-img@83-105.el5_4.27?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-0:83-105.el5_4.27.src",
                "product": {
                  "name": "kvm-0:83-105.el5_4.27.src",
                  "product_id": "kvm-0:83-105.el5_4.27.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-105.el5_4.27?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-105.el5_4.27.src as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-0:83-105.el5_4.27.src"
        },
        "product_reference": "kvm-0:83-105.el5_4.27.src",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Desktop Multi OS (v. 5 client)",
          "product_id": "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-tools-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Client-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-105.el5_4.27.src as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-0:83-105.el5_4.27.src"
        },
        "product_reference": "kvm-0:83-105.el5_4.27.src",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Server-VT"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-105.el5_4.27.x86_64 as a component of Red Hat Enterprise Linux Virtualization (v. 5 server)",
          "product_id": "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
        },
        "product_reference": "kvm-tools-0:83-105.el5_4.27.x86_64",
        "relates_to_product_reference": "5Server-VT"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-3722",
      "discovery_date": "2009-10-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "531660"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The handle_dr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level (CPL) before accessing a debug register, which allows guest OS users to cause a denial of service (trap) on the host OS via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "KVM: Check cpl before emulating debug register access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-3722\n\nThe Red Hat Product Security has rated this issue as having moderate security impact, a future update will address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-0:83-105.el5_4.27.src",
          "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-0:83-105.el5_4.27.src",
          "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-3722"
        },
        {
          "category": "external",
          "summary": "RHBZ#531660",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=531660"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-3722",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-3722"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-3722",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-3722"
        }
      ],
      "release_date": "2009-09-10T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-01T19:23:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-0:83-105.el5_4.27.src",
            "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-0:83-105.el5_4.27.src",
            "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0126"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.9,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-0:83-105.el5_4.27.src",
            "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-0:83-105.el5_4.27.src",
            "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "KVM: Check cpl before emulating debug register access"
    },
    {
      "cve": "CVE-2010-0419",
      "discovery_date": "2010-02-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "563463"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kvm: emulator privilege escalation segment selector check",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-0:83-105.el5_4.27.src",
          "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
          "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-0:83-105.el5_4.27.src",
          "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
          "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2010-0419"
        },
        {
          "category": "external",
          "summary": "RHBZ#563463",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=563463"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2010-0419",
          "url": "https://www.cve.org/CVERecord?id=CVE-2010-0419"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2010-0419",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0419"
        }
      ],
      "release_date": "2010-03-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2010-03-01T19:23:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-0:83-105.el5_4.27.src",
            "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-0:83-105.el5_4.27.src",
            "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2010:0126"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.9,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Client-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-0:83-105.el5_4.27.src",
            "5Client-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Client-VT:kvm-tools-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kmod-kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-0:83-105.el5_4.27.src",
            "5Server-VT:kvm-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-debuginfo-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-qemu-img-0:83-105.el5_4.27.x86_64",
            "5Server-VT:kvm-tools-0:83-105.el5_4.27.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kvm: emulator privilege escalation segment selector check"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.