CVE-2010-0419

The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
kvm
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
ignored
intrepid
ignored
hardy
ignored
dapper
dne
linux
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
Fixed 2.6.31-22.60
released
jaunty
Fixed 2.6.28-19.61
released
intrepid
ignored
hardy
not-affected
dapper
dne
linux-ec2
natty
dne
maverick
ignored
lucid
not-affected
karmic
Fixed 2.6.31-307.15
released
jaunty
dne
intrepid
dne
hardy
dne
dapper
dne
linux-fsl-imx51
natty
dne
maverick
dne
lucid
Fixed 2.6.31-608.14
released
karmic
Fixed 2.6.31-112.30
released
hardy
dne
dapper
dne
linux-lts-backport-maverick
natty
dne
maverick
dne
lucid
not-affected
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
dne
linux-mvl-dove
natty
dne
maverick
not-affected
lucid
not-affected
karmic
ignored
hardy
dne
dapper
dne
linux-source-2.6.15
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
not-affected
linux-ti-omap4
natty
not-affected
maverick
not-affected
lucid
dne
karmic
dne
hardy
dne
dapper
dne
qemu-kvm
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
not-affected
jaunty
dne
intrepid
dne
hardy
dne
dapper
dne
Common Weakness Enumeration