PT-2010-2478 · Linux+2 · Linux Kernel+2

Paolo Bonzini

+1

·

Published

2010-05-06

·

Updated

2018-10-10

·

CVE-2010-0730

CVSS v2.0

2.6

Low

VectorAV:N/AC:H/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel version 2.6.18 in Red Hat Enterprise Linux (RHEL) 5
Description The issue allows guest OS users to cause a denial of service, specifically a 32-bit guest OS crash, by exploiting the MMIO instruction decoder in the Xen hypervisor. This is achieved through vectors that trigger an unspecified instruction emulation.
Recommendations For Linux kernel version 2.6.18 in Red Hat Enterprise Linux (RHEL) 5, consider applying a patch or update that addresses the MMIO instruction decoder issue in the Xen hypervisor to prevent guest OS users from causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-0730
RHSA-2010:0398
RHSA-2010_0398

Affected Products

Linux Kernel
Red Hat
Xen Hypervisor