PT-2018-3391 · Xen+1 · Xen+1

Paul Durrant · Publicado 2018-12-07 · Atualizado 2024-06-15 · CVE-2018-19964

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Xen versions 4.11.x

Description: An issue in Xen allows x86 guest OS users to cause a denial of service, resulting in the host OS hanging. This occurs because the p2m lock remains unavailable indefinitely in certain error conditions. The vulnerability is related to incorrect error handling.

Recommendations: For Xen version 4.11.x, consider applying configuration changes to mitigate the risk of denial of service, such as adjusting error handling mechanisms to prevent the p2m lock from remaining unavailable indefinitely. However, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-388

Identificadores relacionados

BDU:2020-00738

CVE-2018-19964

OPENSUSE-SU-2024:11520-1

SUSE-SU-2019:0003-1

Produtos afetados

Suse

Xen

Referências · 122

• https://suse.com/security/cve/CVE-2016-10025 · Nota
• https://bugzilla.suse.com/1027519 · Nota
• https://osv.dev/vulnerability/CVE-2018-19964 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-29481 · Nota
• https://bugzilla.suse.com/1115047 · Nota
• https://suse.com/security/cve/CVE-2020-29570 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-15563 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2018-19964 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2007-3919 · Nota
• https://suse.com/security/cve/CVE-2016-9382 · Nota
• https://suse.com/security/cve/CVE-2020-29483 · Nota
• https://suse.com/security/cve/CVE-2016-7777 · Nota
• https://suse.com/security/cve/CVE-2018-7541 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-19964 · Aviso do Fabricante