CVE - CVE-2017-2583

CVE-ID
CVE-2017-2583	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulates a "MOV SS, NULL selector" instruction, which allows guest OS users to cause a denial of service (guest OS crash) or gain guest OS privileges via a crafted application.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:95673 URL:http://www.securityfocus.com/bid/95673 MISC:DSA-3791 URL:http://www.debian.org/security/2017/dsa-3791 MISC:RHSA-2017:1615 URL:https://access.redhat.com/errata/RHSA-2017:1615 MISC:RHSA-2017:1616 URL:https://access.redhat.com/errata/RHSA-2017:1616 MISC:USN-3754-1 URL:https://usn.ubuntu.com/3754-1/ MISC:[oss-security] 20170119 CVE-2017-2583 Kernel: Kvm: vmx/svm potential privilege escalation inside guest URL:http://www.openwall.com/lists/oss-security/2017/01/19/2 MISC:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3 URL:http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=33ab91103b3415e12457e3104f0e4517ce12d0f3 MISC:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 URL:http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.5 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1414735 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1414735 MISC:https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3 URL:https://github.com/torvalds/linux/commit/33ab91103b3415e12457e3104f0e4517ce12d0f3
Assigning CNA
Red Hat, Inc.
Date Record Created
20161201	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20161201)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)