CVE-2018-12207

MEDIUM6.5EPSS 0.26%

linux - security update

發布日:2019/11/14修改日:2025/12/3

也稱為:DSA-4564-1ALPINE-CVE-2018-12207DEBIAN-CVE-2018-12207

描述

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access.

受影響套件(6)

Alpine/xenfrom 0, < 4.12.1-r1
Debian/linuxfrom 0, < 5.3.9-2
Debian/linuxfrom 0, < 4.9.189-3+deb9u2
Debian/linux-4.9from 0, < 4.9.189-3+deb9u2~deb8u1
Debian/xenfrom 0, < 4.11.3+24-g14b62ab3e5-1
Debian/xenfrom 0, < 4.8.5.final+shim4.10.4-1+deb9u12

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

參考連結(2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-12207
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-12207