CVE-2015-7513

 

Published at: - 08-02-2016 04:59

Last modified: - 21-09-2022 08:44

Total changes: - 3

Description

arch/x86/kvm/x86.c in the Linux kernel before 4.4 does not reset the PIT counter values during state restoration, which allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via a zero value, related to the kvm_vm_ioctl_set_pit and kvm_vm_ioctl_set_pit2 functions.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://bugzilla.redhat.com/show_bug.cgi?id=1284847
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0185604c2d82c560dab2f2933a18f797e74ab5a8
• https://github.com/torvalds/linux/commit/0185604c2d82c560dab2f2933a18f797e74ab5a8
• [oss-security] 20160107 CVE-2015-7513 Kernel: kvm: divide by zero issue leads to DoS-Mailing List, Patch, Third Party Advisory
• USN-2889-1-Third Party Advisory
• FEDORA-2016-5d43766e33-Third Party Advisory
• USN-2890-1-Third Party Advisory
• USN-2890-3-Third Party Advisory
• USN-2887-2-Third Party Advisory
• USN-2890-2-Third Party Advisory
• USN-2887-1-Third Party Advisory
• FEDORA-2016-26e19f042a-Third Party Advisory
• FEDORA-2016-b59fd603be-Third Party Advisory
• USN-2888-1-Third Party Advisory
• USN-2886-1-Third Party Advisory
• USN-2889-2-Third Party Advisory
• 79901-Third Party Advisory, VDB Entry
• 1034602-Third Party Advisory, VDB Entry
• DSA-3434-Third Party Advisory

 

Keywords

NVD

 

CVE-2015-7513

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures