Vulnerability Description
arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tables (EPT) functionality is used, accesses VMCS fields without verifying hardware support for these fields, which allows local users to cause a denial of service (host OS crash) by requesting a VMCS dump for a fully virtualized Xen guest.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | 2.6.18 |
| Redhat | Enterprise Linux | 5 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/46397
- http://support.avaya.com/css/P8/documents/100113326
- http://www.redhat.com/support/errata/RHSA-2010-0723.html
- http://www.securityfocus.com/archive/1/520102/100/0/threaded
- http://www.securityfocus.com/bid/43578
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- http://xenbits.xensource.com/xen-unstable.hg?rev/15911
- https://bugzilla.redhat.com/show_bug.cgi?id=620490
- http://secunia.com/advisories/46397
- http://support.avaya.com/css/P8/documents/100113326
- http://www.redhat.com/support/errata/RHSA-2010-0723.html
- http://www.securityfocus.com/archive/1/520102/100/0/threaded
- http://www.securityfocus.com/bid/43578
- http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- http://xenbits.xensource.com/xen-unstable.hg?rev/15911
FAQ
What is CVE-2010-2938?
CVE-2010-2938 is a vulnerability with a CVSS score of 4.9 (MEDIUM). arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure (VMCS) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when an Intel platform without Extended Page Tab...
How severe is CVE-2010-2938?
CVE-2010-2938 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-2938?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Linux.