CVE-2023-1513CWE-665
A flaw was found in KVM
Low · published March 23, 2023
What it is
A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak.
The record
Technical detail
- CVSS v3.1
- 3.3 · LOW
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00229 · 12.9th percentile
- Weakness
- CWE-665 · Improper Initialization
- Published
- 2023-03-23T00:00Z
EPSS history
Timeline
23 MAR 00:00Z
A flaw was found in KVM
cvelistv5