PT-2008-3474 · Xensource+1 · Xen Ioemu+1

Publicado 2008-06-23 · Atualizado 2017-09-29 · CVE-2008-1952

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen ioemu (affected versions not specified)

Description The issue concerns the XenSource Xen Para Virtualized Frame Buffer (PVFB) backend in Xen ioemu, where it fails to properly restrict the frame buffer size. This allows attackers to cause a denial of service by mapping an arbitrary amount of guest memory, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1952

RHSA-2008:0892

RHSA-2008_0892

Produtos afetados

Red Hat

Xen Ioemu

Referências · 13

• http://securityfocus.com/bid/30646 · Nota
• https://access.redhat.com/errata/RHSA-2008:0892 · Nota
• https://access.redhat.com/security/cve/CVE-2008-1945 · Nota
• http://secunia.com/advisories/32088 · Aviso do Fabricante
• http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1952 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189 · Nota
• https://rhn.redhat.com/errata/RHSA-2008-0892.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2008-1952 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43362 · Nota
• http://openwall.com/lists/oss-security/2008/05/21/9 · Correção
• http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721 · Correção
• http://securitytracker.com/id?1020957 · Nota