PT-2011-1484 · Linux+2 · Linux Kernel+2

Vladymyr Denysov

·

Publicado

2011-01-13

·

Atualizado

2023-02-13

·

CVE-2010-4238

CVSS v2.0

5.5

Média

VetorAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Xen version 3.1.2 Linux kernel version 2.6.18 on Red Hat Enterprise Linux (RHEL) 5
Description The issue allows guest OS users to cause a denial of service, resulting in a host OS panic. This occurs when there is an attempted access to a virtual CD-ROM device through the blkback driver, involving the vbd create function.
Recommendations For Xen version 3.1.2, consider restricting access to the virtual CD-ROM device to prevent the denial of service. For Linux kernel version 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, avoid using the blkback driver until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-4238
RHSA-2011:0017
RHSA-2011_0017

Produtos afetados

Linux Kernel
Red Hat
Xen