Avi Kivity

3 exploits Active since Nov 2005
CVE-2013-1943 WRITEUP HIGH WRITEUP
Linux Kernel < 3.0 - Privilege Escalation and Information Disclosure via KVM Memory Slot Allocation
The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.
CVSS 7.8
CVE-2013-4592 WRITEUP WRITEUP
Linux Kernel < 3.9 - Denial of Service via Memory Leak in __kvm_set_memory_region
Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c in the Linux kernel before 3.9 allows local users to cause a denial of service (memory consumption) by leveraging certain device access to trigger movement of memory slots.
CVE-2005-3857 EXPLOITDB c WORKING POC
Linux Kernel < 2.6.15 - Denial of Service via Lease Time-Out Log Flooding
The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of service (kernel log message consumption) by causing a large number of broken leases, which is recorded to the log using the printk function.