# CVEs published 2014-11-10

17 CVEs were published on November 10, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3610](https://cve.now/CVE-2014-3610.md): The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-can (no CVSS)
- [CVE-2014-3611](https://cve.now/CVE-2014-3611.md): Race condition in the \_\_kvm\_migrate\_pit\_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allow (no CVSS)
- [CVE-2014-3645](https://cve.now/CVE-2014-3645.md): arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allo (no CVSS)
- [CVE-2014-3646](https://cve.now/CVE-2014-3646.md): arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which (no CVSS)
- [CVE-2014-3647](https://cve.now/CVE-2014-3647.md): arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS (no CVSS)
- [CVE-2014-3673](https://cve.now/CVE-2014-3673.md): The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malform (no CVSS)
- [CVE-2014-3687](https://cve.now/CVE-2014-3687.md): The sctp\_assoc\_lookup\_asconf\_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remot (no CVSS)
- [CVE-2014-3690](https://cve.now/CVE-2014-3690.md): arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 cont (no CVSS)
- [CVE-2014-7207](https://cve.now/CVE-2014-7207.md): A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6\_sele (no CVSS)
- [CVE-2014-7825](https://cve.now/CVE-2014-7825.md): kernel/trace/trace\_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf sub (no CVSS)
- [CVE-2014-7826](https://cve.now/CVE-2014-7826.md): kernel/trace/trace\_syscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the ftrace s (no CVSS)
- [CVE-2014-8369](https://cve.now/CVE-2014-8369.md): The kvm\_iommu\_map\_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handlin (no CVSS)
- [CVE-2014-8480](https://cve.now/CVE-2014-8480.md): The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 lacks intended decoder-table flag (no CVSS)
- [CVE-2014-8481](https://cve.now/CVE-2014-8481.md): The instruction decoder in arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel before 3.18-rc2 does not properly handle invalid (no CVSS)
- [CVE-2014-8559](https://cve.now/CVE-2014-8559.md): The d\_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename\_lock, which allows (no CVSS)
- [CVE-2014-8652](https://cve.now/CVE-2014-8652.md): Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HT (no CVSS)
- [CVE-2014-8709](https://cve.now/CVE-2014-8709.md): The ieee80211\_fragment function in net/mac80211/tx.c in the Linux kernel before 3.13.5 does not properly maintain a certain tail pointer, wh (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.