PT-2011-3459 · Intel+2 · Intel Vt-D+2

Joanna Rutkowska · Publicado 2011-08-12 · Atualizado 2024-06-15 · CVE-2011-1898

Positive Technologies (AI Summary)

CVSS v2.0

7.4

Alta

Vetor base

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.0.1 Xen versions 4.1 through 4.1.0

Description The issue allows guest OS users to gain host OS privileges by using DMA to generate MSI interrupts by writing to the interrupt injection registers, specifically when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping.

Recommendations For Xen versions 4.0 through 4.0.1, update to version 4.0.2 or later. For Xen versions 4.1 through 4.1.0, update to version 4.1.1 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-1898

DSA-2337-1

OPENSUSE-SU-2024:10196-1

RHSA-2011:1189

RHSA-2011:1479

RHSA-2011_1189

RHSA-2011_1479

RHSA-2012:0358

Produtos afetados

Intel Vt-D

Red Hat

Xen

Referências · 174

• 🔥 http://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf · Exploit
• https://github.com/torvalds/linux/commit/da48524eb20662618854bb3df2db01fc65f3070c · Nota
• https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html · Aviso do Fabricante
• https://lkml.org/lkml/2011/6/8/154 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://bdu.fstec.ru/vul/2014-00070 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://bdu.fstec.ru/vul/2015-04607 · Nota de Segurança