CVE-2017-1000407

Public on 2017-12-21
Modified on 2017-12-21
Description
Linux kernel Virtualization Module (CONFIG_KVM) for the Intel processor family (CONFIG_KVM_INTEL) is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests. A guest user could use this flaw to crash the host kernel resulting in DoS.
Severity
Medium
CVSS v3 Base Score
6.1
See breakdown

Affected Packages

Platform Package Release Date Advisory
Amazon Linux 1 kernel 2017-12-21 00:02 ALAS-2017-937

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv2 4.6 AV:A/AC:H/Au:N/C:N/I:N/A:C
Amazon Linux CVSSv3 6.1 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
NVD CVSSv2 6.1 AV:A/AC:L/Au:N/C:N/I:N/A:C
NVD CVSSv3 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H