CVE-2010-0298

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3…

published February 12, 2010

CVSS
—
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02416 · 84.0th percentile
Published
2010-02-12T19:00Z
EPSS history
Timeline
  • 12 FEB 19:00Z
    The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3…
    cvelistv5