PT-2008-3474 · Xensource+1 · Xen Ioemu+1

Published 2008-06-23 · Updated 2017-09-29 · CVE-2008-1952

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen ioemu (affected versions not specified)

Description The issue concerns the XenSource Xen Para Virtualized Frame Buffer (PVFB) backend in Xen ioemu, where it fails to properly restrict the frame buffer size. This allows attackers to cause a denial of service by mapping an arbitrary amount of guest memory, leading to a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1952

RHSA-2008:0892

RHSA-2008_0892

Affected Products

Red Hat

Xen Ioemu

References · 13

• http://secunia.com/advisories/32088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1952 · Security Note
• https://rhn.redhat.com/errata/RHSA-2008-0892.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2008/05/21/9 · Patch
• http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721 · Patch
• http://securityfocus.com/bid/30646 · Note
• https://access.redhat.com/errata/RHSA-2008:0892 · Note
• https://access.redhat.com/security/cve/CVE-2008-1945 · Note
• http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189 · Note
• https://access.redhat.com/security/cve/CVE-2008-1952 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43362 · Note
• http://securitytracker.com/id?1020957 · Note