PT-2014-2108 · Xen+1 · Xen+1

Publicado 2011-05-31 · Atualizado 2015-10-06 · CVE-2011-1166

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.0.2

Description The issue allows local 64-bit PV guests to cause a denial of service, resulting in a host crash. This occurs when a guest specifies user mode execution without user-mode pagetables.

Recommendations For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1166

DSA-2337-1

RHSA-2011:0833

RHSA-2011_0833

Produtos afetados

Red Hat

Xen

Referências · 23

• https://access.redhat.com/security/cve/CVE-2011-1495 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1079 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1080 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1494 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1166 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2011-0833.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04607 · Nota de Segurança
• http://downloads.avaya.com/css/P8/documents/100145416 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1172 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1166 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1170 · Nota
• https://access.redhat.com/security/cve/CVE-2011-1078 · Nota
• https://osv.dev/vulnerability/CVE-2011-1166 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-1166 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2011:0833 · Nota