PT-2018-2573 · Xen+1 · Xen+1
Publicado
2018-11-12
·
Atualizado
2024-06-15
·
CVE-2018-19967
CVSS v3.1
6.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Xen versions prior to 4.12
Description
The issue allows guest OS users to cause a denial of service, resulting in a host OS hang, due to Xen's failure to work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix. This is related to insufficient input validation, which can be exploited by an attacker from a guest OS to cause a denial of service.
Recommendations
For Xen versions prior to 4.12, update to version 4.12 or later to resolve the issue.
At the moment, there is no information about other specific workarounds for this vulnerability.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Xen