{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server EUS version 6.4.z",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Workstation version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux HPC Node version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server AUS version 6.4",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server version 6",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-6537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6537"
    },
    {
      "name": "CVE-2013-1826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1826"
    },
    {
      "name": "CVE-2013-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1798"
    },
    {
      "name": "CVE-2013-0349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0349"
    },
    {
      "name": "CVE-2013-1774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1774"
    },
    {
      "name": "CVE-2013-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1767"
    },
    {
      "name": "CVE-2012-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6546"
    },
    {
      "name": "CVE-2013-0913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0913"
    },
    {
      "name": "CVE-2013-1797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1797"
    },
    {
      "name": "CVE-2013-1773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1773"
    },
    {
      "name": "CVE-2013-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1792"
    },
    {
      "name": "CVE-2013-1827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1827"
    },
    {
      "name": "CVE-2013-1796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1796"
    },
    {
      "name": "CVE-2012-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6547"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2013-0744 du 23 avril    2013",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
    }
  ],
  "reference": "CERTA-2013-AVI-269",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-04-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRed Hat\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2013-0744 du 23 avril 2013",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMandriva Business Server 1\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-2546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2546"
    },
    {
      "name": "CVE-2013-3228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3228"
    },
    {
      "name": "CVE-2013-1979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1979"
    },
    {
      "name": "CVE-2013-0217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0217"
    },
    {
      "name": "CVE-2013-0290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0290"
    },
    {
      "name": "CVE-2013-3225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3225"
    },
    {
      "name": "CVE-2013-3235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3235"
    },
    {
      "name": "CVE-2013-0914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0914"
    },
    {
      "name": "CVE-2013-3233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3233"
    },
    {
      "name": "CVE-2013-3223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3223"
    },
    {
      "name": "CVE-2013-1929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1929"
    },
    {
      "name": "CVE-2013-1860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1860"
    },
    {
      "name": "CVE-2013-2635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2635"
    },
    {
      "name": "CVE-2013-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0216"
    },
    {
      "name": "CVE-2013-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1798"
    },
    {
      "name": "CVE-2013-2548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2548"
    },
    {
      "name": "CVE-2013-2634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2634"
    },
    {
      "name": "CVE-2013-3234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3234"
    },
    {
      "name": "CVE-2013-3222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3222"
    },
    {
      "name": "CVE-2013-2094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2094"
    },
    {
      "name": "CVE-2013-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1767"
    },
    {
      "name": "CVE-2012-6548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6548"
    },
    {
      "name": "CVE-2013-1797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1797"
    },
    {
      "name": "CVE-2013-3231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3231"
    },
    {
      "name": "CVE-2013-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1792"
    },
    {
      "name": "CVE-2013-2547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2547"
    },
    {
      "name": "CVE-2013-3229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3229"
    },
    {
      "name": "CVE-2013-0311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0311"
    },
    {
      "name": "CVE-2013-1796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1796"
    },
    {
      "name": "CVE-2013-2596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2596"
    },
    {
      "name": "CVE-2013-2141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2141"
    },
    {
      "name": "CVE-2013-0228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0228"
    },
    {
      "name": "CVE-2013-3227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3227"
    },
    {
      "name": "CVE-2012-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6547"
    },
    {
      "name": "CVE-2013-3232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3232"
    },
    {
      "name": "CVE-2012-5532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5532"
    },
    {
      "name": "CVE-2012-6549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6549"
    },
    {
      "name": "CVE-2013-3224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3224"
    },
    {
      "name": "CVE-2012-2669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2669"
    },
    {
      "name": "CVE-2013-1848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1848"
    },
    {
      "name": "CVE-2013-2146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2146"
    },
    {
      "name": "CVE-2013-1763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1763"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2013:176 du 24 juin    2013",
      "url": "http://www.mandriva.com/fr/support/security/advisories/mbs1/MDVSA-2013:176/"
    }
  ],
  "reference": "CERTA-2013-AVI-375",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-06-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eMandriva\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Mandriva",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2013:176 du 24 juin 2013",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Red Hat Enterprise Linux Server EUS version 6.4.z",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Workstation version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux HPC Node version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server AUS version 6.4",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Server version 6",
      "product": {
        "name": "Red Hat Enterprise Linux Server",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    },
    {
      "description": "Red Hat Enterprise Linux Desktop version 6",
      "product": {
        "name": "Red Hat Enterprise Linux",
        "vendor": {
          "name": "Red Hat",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-6537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6537"
    },
    {
      "name": "CVE-2013-1826",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1826"
    },
    {
      "name": "CVE-2013-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1798"
    },
    {
      "name": "CVE-2013-0349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0349"
    },
    {
      "name": "CVE-2013-1774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1774"
    },
    {
      "name": "CVE-2013-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1767"
    },
    {
      "name": "CVE-2012-6546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6546"
    },
    {
      "name": "CVE-2013-0913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0913"
    },
    {
      "name": "CVE-2013-1797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1797"
    },
    {
      "name": "CVE-2013-1773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1773"
    },
    {
      "name": "CVE-2013-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1792"
    },
    {
      "name": "CVE-2013-1827",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1827"
    },
    {
      "name": "CVE-2013-1796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1796"
    },
    {
      "name": "CVE-2012-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6547"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2013-0744 du 23 avril    2013",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
    }
  ],
  "reference": "CERTA-2013-AVI-269",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-04-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eRed Hat\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Red Hat",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Red Hat RHSA-2013-0744 du 23 avril 2013",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMandriva Business Server 1\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2013-2546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2546"
    },
    {
      "name": "CVE-2013-3228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3228"
    },
    {
      "name": "CVE-2013-1979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1979"
    },
    {
      "name": "CVE-2013-0217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0217"
    },
    {
      "name": "CVE-2013-0290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0290"
    },
    {
      "name": "CVE-2013-3225",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3225"
    },
    {
      "name": "CVE-2013-3235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3235"
    },
    {
      "name": "CVE-2013-0914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0914"
    },
    {
      "name": "CVE-2013-3233",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3233"
    },
    {
      "name": "CVE-2013-3223",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3223"
    },
    {
      "name": "CVE-2013-1929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1929"
    },
    {
      "name": "CVE-2013-1860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1860"
    },
    {
      "name": "CVE-2013-2635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2635"
    },
    {
      "name": "CVE-2013-0216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0216"
    },
    {
      "name": "CVE-2013-1798",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1798"
    },
    {
      "name": "CVE-2013-2548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2548"
    },
    {
      "name": "CVE-2013-2634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2634"
    },
    {
      "name": "CVE-2013-3234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3234"
    },
    {
      "name": "CVE-2013-3222",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3222"
    },
    {
      "name": "CVE-2013-2094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2094"
    },
    {
      "name": "CVE-2013-1767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1767"
    },
    {
      "name": "CVE-2012-6548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6548"
    },
    {
      "name": "CVE-2013-1797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1797"
    },
    {
      "name": "CVE-2013-3231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3231"
    },
    {
      "name": "CVE-2013-1792",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1792"
    },
    {
      "name": "CVE-2013-2547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2547"
    },
    {
      "name": "CVE-2013-3229",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3229"
    },
    {
      "name": "CVE-2013-0311",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0311"
    },
    {
      "name": "CVE-2013-1796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1796"
    },
    {
      "name": "CVE-2013-2596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2596"
    },
    {
      "name": "CVE-2013-2141",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2141"
    },
    {
      "name": "CVE-2013-0228",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0228"
    },
    {
      "name": "CVE-2013-3227",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3227"
    },
    {
      "name": "CVE-2012-6547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6547"
    },
    {
      "name": "CVE-2013-3232",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3232"
    },
    {
      "name": "CVE-2012-5532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5532"
    },
    {
      "name": "CVE-2012-6549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-6549"
    },
    {
      "name": "CVE-2013-3224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-3224"
    },
    {
      "name": "CVE-2012-2669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2669"
    },
    {
      "name": "CVE-2013-1848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1848"
    },
    {
      "name": "CVE-2013-2146",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-2146"
    },
    {
      "name": "CVE-2013-1763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-1763"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2013:176 du 24 juin    2013",
      "url": "http://www.mandriva.com/fr/support/security/advisories/mbs1/MDVSA-2013:176/"
    }
  ],
  "reference": "CERTA-2013-AVI-375",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-06-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans le noyau Linux de\n\u003cspan class=\"textit\"\u003eMandriva\u003c/span\u003e. Certaines d\u0027entre elles permettent\n\u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Mandriva",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDVSA-2013:176 du 24 juin 2013",
      "url": null
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D272EF6-C70C-4FC5-98C4-3240045414FB",
              "versionEndIncluding": "3.8.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:3.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A6E41FB-38CE-49F2-B796-9A5AA648E73F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:3.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "93523FE1-5993-46CB-9299-7C8C1A04E873",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:3.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "27ADC356-6BE9-43A3-9E0B-393DC4B1559A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:3.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F543D23-1774-4D14-A7D1-AD49EDEA94DD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad despu\u00e9s de liberaci\u00f3n en arch/x86/kvm/x86.c en el kernel de Linux hasta v3.8.4 permite a los clientes usuarios del sistema operativo para causar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria anfitri\u00f3n OS) o posiblemente tener otro impacto no especificado a trav\u00e9s de una aplicaci\u00f3n hecha a mano que provoca el uso de una direcci\u00f3n f\u00edsica invitado (GPA) en (1) tipo movable \u00f3 (2) de memoria extra\u00edble durante una operaci\u00f3n MSR_KVM_SYSTEM_TIME kvm_set_msr_common."
    }
  ],
  "id": "CVE-2013-1797",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 6.8,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.2,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-03-22T11:59:11.567",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0727.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0746.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0928.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1026.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.openwall.com/lists/oss-security/2013/03/20/9"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1809-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1812-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-1813-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0727.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0746.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0928.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1026.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2013/03/20/9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1809-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1812-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-1813-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2013-1797"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2013-03-22T11:59:00Z",
    "severity": "MODERATE"
  },
  "details": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.",
  "id": "GHSA-3fq7-5q53-mpg7",
  "modified": "2022-05-17T04:53:44Z",
  "published": "2022-05-17T04:53:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1797"
    },
    {
      "type": "WEB",
      "url": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0727"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0744"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0746"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:0928"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2013:1026"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2013-1797"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
    },
    {
      "type": "WEB",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "type": "WEB",
      "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0727.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0746.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0928.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1026.html"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2013/03/20/9"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1809-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1812-1"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-1813-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2013-1797",
    "description": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.",
    "id": "GSD-2013-1797",
    "references": [
      "https://www.suse.com/security/cve/CVE-2013-1797.html",
      "https://access.redhat.com/errata/RHSA-2013:1026",
      "https://access.redhat.com/errata/RHSA-2013:0928",
      "https://access.redhat.com/errata/RHSA-2013:0746",
      "https://access.redhat.com/errata/RHSA-2013:0744",
      "https://access.redhat.com/errata/RHSA-2013:0727",
      "https://linux.oracle.com/cve/CVE-2013-1797.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2013-1797"
      ],
      "details": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.",
      "id": "GSD-2013-1797",
      "modified": "2023-12-13T01:22:20.321936Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2013-1797",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0928.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0928.html"
          },
          {
            "name": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html",
            "refsource": "MISC",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0727.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0727.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0744.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-0746.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-0746.html"
          },
          {
            "name": "http://rhn.redhat.com/errata/RHSA-2013-1026.html",
            "refsource": "MISC",
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1026.html"
          },
          {
            "name": "http://www.openwall.com/lists/oss-security/2013/03/20/9",
            "refsource": "MISC",
            "url": "http://www.openwall.com/lists/oss-security/2013/03/20/9"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1809-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1809-1"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1812-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1812-1"
          },
          {
            "name": "http://www.ubuntu.com/usn/USN-1813-1",
            "refsource": "MISC",
            "url": "http://www.ubuntu.com/usn/USN-1813-1"
          },
          {
            "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1",
            "refsource": "MISC",
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
          },
          {
            "name": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1",
            "refsource": "MISC",
            "url": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=917013",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.8.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.8.4",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:3.8.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2013-1797"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=917013",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://github.com/torvalds/linux/commit/0b79459b482e85cb7426aa7da683a9f2c97aeae1"
            },
            {
              "name": "[oss-security] 20130320 linux kernel: kvm: CVE-2013-179[6..8]",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2013/03/20/9"
            },
            {
              "name": "USN-1813-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-1813-1"
            },
            {
              "name": "USN-1812-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-1812-1"
            },
            {
              "name": "RHSA-2013:0744",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0744.html"
            },
            {
              "name": "RHSA-2013:0727",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0727.html"
            },
            {
              "name": "USN-1809-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-1809-1"
            },
            {
              "name": "RHSA-2013:0746",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0746.html"
            },
            {
              "name": "openSUSE-SU-2013:0847",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html"
            },
            {
              "name": "RHSA-2013:0928",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-0928.html"
            },
            {
              "name": "openSUSE-SU-2013:0925",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html"
            },
            {
              "name": "openSUSE-SU-2013:1187",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html"
            },
            {
              "name": "MDVSA-2013:176",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:176"
            },
            {
              "name": "RHSA-2013:1026",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1026.html"
            },
            {
              "name": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1",
              "refsource": "MISC",
              "tags": [],
              "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0b79459b482e85cb7426aa7da683a9f2c97aeae1"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.2,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T04:41Z",
      "publishedDate": "2013-03-22T11:59Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kvm packages that fix three security issues are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for\nthe standard Red Hat Enterprise Linux kernel.\n\nA flaw was found in the way KVM handled guest time updates when the buffer\nthe guest registered by writing to the MSR_KVM_SYSTEM_TIME machine state\nregister (MSR) crossed a page boundary. A privileged guest user could use\nthis flaw to crash the host or, potentially, escalate their privileges,\nallowing them to execute arbitrary code at the host kernel level.\n(CVE-2013-1796)\n\nA potential use-after-free flaw was found in the way KVM handled guest time\nupdates when the GPA (guest physical address) the guest registered by\nwriting to the MSR_KVM_SYSTEM_TIME machine state register (MSR) fell into a\nmovable or removable memory region of the hosting user-space process (by\ndefault, QEMU-KVM) on the host. If that memory region is deregistered from\nKVM using KVM_SET_USER_MEMORY_REGION and the allocated virtual memory\nreused, a privileged guest user could potentially use this flaw to\nescalate their privileges on the host. (CVE-2013-1797)\n\nA flaw was found in the way KVM emulated IOAPIC (I/O Advanced Programmable\nInterrupt Controller). A missing validation check in the\nioapic_read_indirect() function could allow a privileged guest user to\ncrash the host, or read a substantial portion of host kernel memory.\n(CVE-2013-1798)\n\nRed Hat would like to thank Andrew Honig of Google for reporting all of\nthese issues.\n\nAll users of kvm are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues. Note that the procedure\nin the Solution section must be performed before this update will take\neffect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:0727",
        "url": "https://access.redhat.com/errata/RHSA-2013:0727"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "917012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917012"
      },
      {
        "category": "external",
        "summary": "917013",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
      },
      {
        "category": "external",
        "summary": "917017",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917017"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0727.json"
      }
    ],
    "title": "Red Hat Security Advisory: kvm security update",
    "tracking": {
      "current_release_date": "2025-11-21T17:43:25+00:00",
      "generator": {
        "date": "2025-11-21T17:43:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2013:0727",
      "initial_release_date": "2013-04-09T18:06:00+00:00",
      "revision_history": [
        {
          "date": "2013-04-09T18:06:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-04-09T18:11:53+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:43:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEL Virtualization (v. 5 server)",
                "product": {
                  "name": "RHEL Virtualization (v. 5 server)",
                  "product_id": "5Server-VT-5.9.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-debuginfo-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kvm-debuginfo-0:83-262.el5_9.3.x86_64",
                  "product_id": "kvm-debuginfo-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-debuginfo@83-262.el5_9.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-qemu-img-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kvm-qemu-img-0:83-262.el5_9.3.x86_64",
                  "product_id": "kvm-qemu-img-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-qemu-img@83-262.el5_9.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-tools-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kvm-tools-0:83-262.el5_9.3.x86_64",
                  "product_id": "kvm-tools-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm-tools@83-262.el5_9.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kmod-kvm-0:83-262.el5_9.3.x86_64",
                  "product_id": "kmod-kvm-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm@83-262.el5_9.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
                  "product_id": "kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kmod-kvm-debug@83-262.el5_9.3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kvm-0:83-262.el5_9.3.x86_64",
                "product": {
                  "name": "kvm-0:83-262.el5_9.3.x86_64",
                  "product_id": "kvm-0:83-262.el5_9.3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-262.el5_9.3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kvm-0:83-262.el5_9.3.src",
                "product": {
                  "name": "kvm-0:83-262.el5_9.3.src",
                  "product_id": "kvm-0:83-262.el5_9.3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kvm@83-262.el5_9.3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kmod-kvm-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kmod-kvm-debug-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-262.el5_9.3.src as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src"
        },
        "product_reference": "kvm-0:83-262.el5_9.3.src",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kvm-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-debuginfo-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kvm-debuginfo-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-qemu-img-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kvm-qemu-img-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kvm-tools-0:83-262.el5_9.3.x86_64 as a component of RHEL Virtualization (v. 5 server)",
          "product_id": "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
        },
        "product_reference": "kvm-tools-0:83-262.el5_9.3.x86_64",
        "relates_to_product_reference": "5Server-VT-5.9.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Honig"
          ],
          "organization": "Google"
        }
      ],
      "cve": "CVE-2013-1796",
      "discovery_date": "2013-02-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "917012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denial of service (buffer overflow and host OS memory corruption) or possibly have unspecified other impact via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 5 and Red Hat Enterprise MRG as they did not provide support\nfor the KVM subsystem.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1796"
        },
        {
          "category": "external",
          "summary": "RHBZ#917012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1796",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1796"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1796",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1796"
        }
      ],
      "release_date": "2013-03-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-09T18:06:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0727"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.5,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Honig"
          ],
          "organization": "Google"
        }
      ],
      "cve": "CVE-2013-1797",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2013-02-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "917013"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted application that triggers use of a guest physical address (GPA) in (1) movable or (2) removable memory during an MSR_KVM_SYSTEM_TIME kvm_set_msr_common operation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 5 and Red Hat Enterprise MRG as they did not provide support\nfor the KVM subsystem.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1797"
        },
        {
          "category": "external",
          "summary": "RHBZ#917013",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917013"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1797",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1797"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1797",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1797"
        }
      ],
      "release_date": "2013-03-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-09T18:06:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0727"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.5,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:A/AC:H/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Andrew Honig"
          ],
          "organization": "Google"
        }
      ],
      "cve": "CVE-2013-1798",
      "discovery_date": "2013-02-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "917017"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of service (host OS OOPS) via a crafted application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: kvm: out-of-bounds access in ioapic indirect register reads",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the versions of Linux kernel as shipped with Red Hat\nEnterprise Linux 5 and Red Hat Enterprise MRG as they did not provide support\nfor the KVM subsystem.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
          "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
          "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-1798"
        },
        {
          "category": "external",
          "summary": "RHBZ#917017",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=917017"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1798",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-1798"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1798",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1798"
        }
      ],
      "release_date": "2013-03-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-04-09T18:06:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258\n\nThe following procedure must be performed before this update will take\neffect:\n\n1) Stop all KVM guest virtual machines.\n\n2) Either reboot the hypervisor machine or, as the root user, remove (using\n\"modprobe -r [module]\") and reload (using \"modprobe [module]\") all of the\nfollowing modules which are currently running (determined using \"lsmod\"):\nkvm, ksm, kvm-intel or kvm-amd.\n\n3) Restart the KVM guest virtual machines.",
          "product_ids": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:0727"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 5.9,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:S/C:C/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "5Server-VT-5.9.Z:kmod-kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kmod-kvm-debug-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.src",
            "5Server-VT-5.9.Z:kvm-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-debuginfo-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-qemu-img-0:83-262.el5_9.3.x86_64",
            "5Server-VT-5.9.Z:kvm-tools-0:83-262.el5_9.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: kvm: out-of-bounds access in ioapic indirect register reads"
    }
  ]
}