CVE-2017-1000407: High severity redhat Virtualization Host vulnerability
Last updated 29 November 2024
Other sources
Linux kernel built with the KVM virtualization(CONFIGKVM) support for the Intel processor family(CONFIGKVMINTEL), is vulnerable to a DoS issue. It could occur if a guest was to flood the I/O port 0x80 with write requests.
A guest user could use this flaw to crash the host kernel resulting in DoS.
Upstream patch -------------- -> https://www.spinics.net/lists/kvm/msg159809.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/12/04/2
— Red Hat
The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000407?
CVE-2017-1000407 is considered to have a high severity due to its potential to cause a denial of service.
How do I fix CVE-2017-1000407?
To fix CVE-2017-1000407, it is recommended to upgrade to patched kernel versions including 5.10.223-1 or later.
Which systems are affected by CVE-2017-1000407?
CVE-2017-1000407 affects various Linux distributions including Red Hat Enterprise Linux, Debian, and Ubuntu systems.
What type of attack does CVE-2017-1000407 involve?
CVE-2017-1000407 involves a denial of service attack that floods an I/O port with write requests.
When was CVE-2017-1000407 reported?
CVE-2017-1000407 was reported on December 4, 2017.