PT-2011-3237 · Xen+1 · Xen+1

Ian Jackson · Published 2011-05-09 · Updated 2011-08-24 · CVE-2011-1583

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 3.2 through 4.1

Description The issue is caused by multiple integer overflows in the xc dom bzimageloader.c file, allowing local users to potentially execute arbitrary code or cause a denial of service. This can be achieved by using a crafted paravirtualised guest kernel image that triggers either a buffer overflow during decompression or an out-of-bounds read in the loader.

Recommendations For Xen versions 3.2 through 4.1, update to a version that includes the fix for the integer overflows in xc dom bzimageloader.c. As a temporary workaround, consider restricting the use of paravirtualised guest kernel images to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-1583

DSA-2337-1

RHSA-2011:0496

RHSA-2011_0496

Affected Products

Red Hat

Xen

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2011-1583 · Security Note
• https://osv.dev/vulnerability/CVE-2011-1583 · Vendor Advisory
• http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1583 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2011-0496.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1583 · Vendor Advisory
• http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html · Patch
• https://access.redhat.com/security/cve/CVE-2011-1583 · Note
• https://access.redhat.com/security/cve/CVE-2011-3262 · Note
• https://access.redhat.com/errata/RHSA-2011:0496 · Note