PT-2011-1488 · Xen+1 · Xen+1

Paolo Bonzini · Published 2011-01-13 · Updated 2018-10-10 · CVE-2010-4255

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0.1 and earlier

Description The issue arises from the fixup page fault function in arch/x86/traps.c when paravirtualization is enabled on 64-bit platforms. It fails to verify that kernel mode is used to call the handle gdt ldt mapping fault function. This allows guest OS users to cause a denial of service (host OS BUG ON) via a crafted memory access.

Recommendations For Xen versions 4.0.1 and earlier, consider updating to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to paravirtualization features to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-4255

RHSA-2011:0017

RHSA-2011_0017

Affected Products

Red Hat

Xen

References · 59

• https://bdu.fstec.ru/vul/2015-08630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-4255 · Security Note
• https://bdu.fstec.ru/vul/2015-08635 · Security Note
• https://bdu.fstec.ru/vul/2015-08634 · Security Note
• https://bdu.fstec.ru/vul/2015-06266 · Security Note
• https://bdu.fstec.ru/vul/2015-08631 · Security Note
• https://bdu.fstec.ru/vul/2015-04589 · Security Note
• https://bdu.fstec.ru/vul/2015-06267 · Security Note
• https://bdu.fstec.ru/vul/2015-06262 · Security Note
• https://bdu.fstec.ru/vul/2015-06261 · Security Note
• https://bdu.fstec.ru/vul/2015-06240 · Security Note
• http://openwall.com/lists/oss-security/2010/11/30/8 · Patch
• https://bdu.fstec.ru/vul/2015-06252 · Security Note
• https://bdu.fstec.ru/vul/2015-08632 · Security Note
• https://bdu.fstec.ru/vul/2015-08636 · Security Note