canonical ubuntu-linux CVE-2014-3646 vulnerability in Canonical and Other Products
Published on November 10, 2014

product logo product logo product logo product logo product logo product logo
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted application.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2014-3646

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2014-3646 are published in these products:

 
 
 
 
 
 

Exploit Probability

EPSS
0.10%
Percentile
27.75%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.