CVE-2019-3887

Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 09 Apr 2019, 00:00
Last modified:04 Aug 2024, 19:19

Vulnerability Summary

Overall Risk (default)
medium
27/100
CVSS Score
6.7 MEDIUM
v3.0 (cve.org)
EPSS Score
0.03% LOW
0% probability -0.01%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Apr 2019, 00:00
Published
Vulnerability first disclosed
04 Aug 2024, 19:19
Last Modified
Vulnerability information updated

Description

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash the host kernel resulting in DoS issue. Kernel versions from 4.16 and newer are vulnerable to this issue.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
  • v3.0•MEDIUM•Score: 6.7CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
  • v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.03%• Percentile: 11%

Techniques & Countermeasures

  • CWE-863•Incorrect Authorization

    The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected Systems

  • canonical•ubuntu_linux

    18.04 | 18.10 | 19.04

  • fedoraproject•fedora

    29

  • linux•linux_kernel

    ≥ 4.16

  • redhat•enterprise_linux

    8.0

  • redhat•enterprise_linux_eus

    8.1 | 8.2 | 8.4

  • redhat•enterprise_linux_for_real_time

    8

  • redhat•enterprise_linux_for_real_time_for_nfv

    8

  • redhat•enterprise_linux_for_real_time_for_nfv_tus

    8.2 | 8.4

  • redhat•enterprise_linux_for_real_time_tus

    8.2 | 8.4

  • redhat•enterprise_linux_server_aus

    8.2 | 8.4

  • redhat•enterprise_linux_server_tus

    8.2 | 8.4

  • the linux foundation•kernel

    from 4.16

References (8)