CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 5.5
CWE Name:  Improper Input Validation
Summary: drivers/vhost/net.c in the linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest os users to cause a denial of service (memory corruption and host os crash) or possibly gain privileges on the host os via crafted packets, related to the handle_rx and get_rx_bufs functions.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/COMPLETE
Published Date: 2014-04-14
Last Modified Date: 2017-01-07