PT-2007-6841 · Xen+1 · Xen+1

Published 2007-11-09 · Updated 2017-09-29 · CVE-2007-5907

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen version 3.1.1

Description The issue allows pv guests to cause a denial of service (crash) by modifying the CR4 TSC from applications, which is not prevented by Xen.

Recommendations For Xen version 3.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5907

RHSA-2008:0957

RHSA-2008_0957

Affected Products

Red Hat

Xen

References · 171

• https://bdu.fstec.ru/vul/2015-01517 · Security Note
• https://bdu.fstec.ru/vul/2015-01514 · Security Note
• https://bdu.fstec.ru/vul/2015-01533 · Security Note
• https://bdu.fstec.ru/vul/2015-05017 · Security Note
• https://bdu.fstec.ru/vul/2015-01505 · Security Note
• https://bdu.fstec.ru/vul/2015-01502 · Security Note
• https://bdu.fstec.ru/vul/2015-01498 · Security Note
• https://bdu.fstec.ru/vul/2015-01512 · Security Note
• https://bdu.fstec.ru/vul/2015-01504 · Security Note
• https://bdu.fstec.ru/vul/2015-01501 · Security Note
• https://bdu.fstec.ru/vul/2015-01570 · Security Note
• https://bdu.fstec.ru/vul/2015-01475 · Security Note
• https://bdu.fstec.ru/vul/2015-01497 · Security Note
• https://bdu.fstec.ru/vul/2015-01581 · Security Note
• https://bdu.fstec.ru/vul/2015-05015 · Security Note