Description
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-504.1.3.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2014:1843 | 2014-11-11T00:00:00Z |
| Red Hat Enterprise Linux 6.5 Extended Update Support | |||
| kernel-0:2.6.32-431.50.1.el6 | cpe:/o:redhat:rhel_eus:6.5 | RHSA-2015:0284 | 2015-03-03T00:00:00Z |
| Red Hat Enterprise Linux 7 | |||
| kernel-0:3.10.0-123.9.2.el7 | cpe:/o:redhat:enterprise_linux:7 | RHSA-2014:1724 | 2014-10-28T00:00:00Z |
| RHEV 3.X Hypervisor and Agents for RHEL-6 | |||
| rhev-hypervisor6-0:6.6-20150123.1.el6ev | cpe:/o:redhat:enterprise_linux:6::hypervisor | RHSA-2015:0126 | 2015-02-04T00:00:00Z |
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DSA |
DSA-3060-1 | linux security update |
 EUVD |
EUVD-2014-3602 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application. |
 Ubuntu USN |
USN-2417-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-2418-1 | Linux kernel (OMAP4) vulnerabilities |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T10:50:17.937Z
Reserved: 2014-05-14T00:00:00.000Z
Link: CVE-2014-3645
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2014-11-10T11:55:06.440
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-3645
Redhat
OpenCVE Enrichment
No data.