PT-2011-3237 · Xen+1 · Xen+1

Ian Jackson · Publicado 2011-05-09 · Atualizado 2011-08-24 · CVE-2011-1583

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 3.2 through 4.1

Description The issue is caused by multiple integer overflows in the xc dom bzimageloader.c file, allowing local users to potentially execute arbitrary code or cause a denial of service. This can be achieved by using a crafted paravirtualised guest kernel image that triggers either a buffer overflow during decompression or an out-of-bounds read in the loader.

Recommendations For Xen versions 3.2 through 4.1, update to a version that includes the fix for the integer overflows in xc dom bzimageloader.c. As a temporary workaround, consider restricting the use of paravirtualised guest kernel images to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-1583

DSA-2337-1

RHSA-2011:0496

RHSA-2011_0496

Produtos afetados

Red Hat

Xen

Referências · 10

• https://access.redhat.com/security/cve/CVE-2011-1583 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1583 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2011-1583 · Aviso do Fabricante
• http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-1583 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2011-0496.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1583 · Aviso do Fabricante
• http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html · Correção
• https://access.redhat.com/security/cve/CVE-2011-3262 · Nota
• https://access.redhat.com/errata/RHSA-2011:0496 · Nota