PT-2011-1488 · Xen+1 · Xen+1

Paolo Bonzini · Publicado 2011-01-13 · Atualizado 2018-10-10 · CVE-2010-4255

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0.1 and earlier

Description The issue arises from the fixup page fault function in arch/x86/traps.c when paravirtualization is enabled on 64-bit platforms. It fails to verify that kernel mode is used to call the handle gdt ldt mapping fault function. This allows guest OS users to cause a denial of service (host OS BUG ON) via a crafted memory access.

Recommendations For Xen versions 4.0.1 and earlier, consider updating to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to paravirtualization features to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-4255

RHSA-2011:0017

RHSA-2011_0017

Produtos afetados

Red Hat

Xen

Referências · 59

• http://securityfocus.com/archive/1/520102/100/0/threaded · Nota
• https://access.redhat.com/security/cve/CVE-2010-3296 · Nota
• https://bdu.fstec.ru/vul/2015-08630 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2011:0017 · Nota
• https://access.redhat.com/security/cve/CVE-2010-4158 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4255 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-08635 · Nota de Segurança
• http://securityreason.com/securityalert/8366 · Nota
• http://openwall.com/lists/oss-security/2010/12/06/3 · Nota
• https://bdu.fstec.ru/vul/2015-08634 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2010-4080 · Nota
• http://securityfocus.com/archive/1/514845 · Nota
• https://bdu.fstec.ru/vul/2015-06266 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=660188 · Nota
• https://access.redhat.com/security/cve/CVE-2010-3877 · Nota