PT-2010-5010 · Xen+1 · Xen+1

Publicado 2010-12-08 · Atualizado 2018-10-10 · CVE-2010-3699

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Baixa

Vetor base

AV:A/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 3.x

Description The issue allows guest OS users to cause a denial of service via a kernel thread leak. This leak can prevent the device and guest OS from being shut down, create a zombie domain, cause a hang in zenwatch, or prevent unspecified xm commands from working properly. It is related to the netback, blkback, or blktap components.

Recommendations For Xen version 3.x, consider applying a patch to fix the kernel thread leak issue in the netback, blkback, or blktap components to prevent denial of service attacks. As a temporary workaround, consider restricting access to the affected components to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-3699

DSA-2153-1

RHSA-2011:0004

RHSA-2011_0004

Produtos afetados

Red Hat

Xen

Referências · 54

• http://exploit-db.com/exploits/15619 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4248 · Nota
• https://bdu.fstec.ru/vul/2015-04590 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-3699 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3432 · Nota
• http://openwall.com/lists/oss-security/2010/11/09/4 · Nota
• http://securityfocus.com/archive/1/520102/100/0/threaded · Nota
• https://access.redhat.com/security/cve/CVE-2010-3865 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3859 · Nota
• https://bdu.fstec.ru/vul/2015-08634 · Nota de Segurança
• http://securitytracker.com/id?1024786 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4157 · Nota
• https://bdu.fstec.ru/vul/2015-08631 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2010-3699 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4161 · Nota