Oval Definition:	oval:com.ubuntu.precise:def:20140049000
Revision Date: 2014-03-11 Version: 1 Title: CVE-2014-0049 on Ubuntu 12.04 LTS (precise) - medium. Description: Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers an invalid memory copy affecting certain cancel_work_item data. A flaw was discovered in the Kernel Virtual Machine (KVM) subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. Family: unix Class: vulnerability Status: Reference(s): CVE-2014-0049 Platform(s): Ubuntu 12.04 LTS Product(s): Definition Synopsis Ubuntu 12.04 LTS (precise) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in precise is not affected. OR NOT While related to the CVE in some way, the 'linux-armadaxp' package in precise is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR The 'linux-lts-quantal' package in precise was vulnerable but has been fixed (note: '3.5.0-49.73~precise1'). OR The 'linux-lts-raring' package in precise was vulnerable but has been fixed (note: '3.8.0-39.57~precise1'). OR The 'linux-lts-saucy' package in precise was vulnerable but has been fixed (note: '3.11.0-20.34~precise1'). OR NOT While related to the CVE in some way, the 'linux-lts-trusty' package in precise is not affected (note: '3.13.0-24.46~precise1'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-ti-omap4' package in precise is not affected.
BACK