CVE-2011-4622

{"id": "CVE-2011-4622", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-01-27T15:55:04.687", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html", "source": "secalert@redhat.com"}, {"url": "http://permalink.gmane.org/gmane.comp.emulators.kvm.devel/83564", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2011/12/21/7", "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2012-0051.html", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/51172", "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id?1026559", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=769721", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller (irqchip) is not available, which allows local users to cause a denial of service (NULL pointer dereference) by starting a timer."}, {"lang": "es", "value": "La funci\u00f3n create_pit_timer en arch/x86/kvm/i8254.c en KVM v83, y posiblemente otras versiones, no controla correctamente las solicitudes de interrupci\u00f3n (IRQs) en el temporizador de intervalos programable (PIT), cuando no hay disponible un controlador de interrupciones virtual (irqchip), lo que permite a usuarios locales causar una denegaci\u00f3n de servicio (desreferencia a puntero a NULL) mediante la iniciaci\u00f3n de un temporizador."}], "lastModified": "2017-12-29T02:29:05.017", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:kvm:83:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9998FC2-8189-4269-BEF5-2044933ACB30"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}