PT-2011-3459 · Intel+2 · Intel Vt-D+2

Joanna Rutkowska · Published 2011-08-12 · Updated 2024-06-15 · CVE-2011-1898

Positive Technologies (AI Summary)

CVSS v2.0

7.4

High

Base vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.0.1 Xen versions 4.1 through 4.1.0

Description The issue allows guest OS users to gain host OS privileges by using DMA to generate MSI interrupts by writing to the interrupt injection registers, specifically when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping.

Recommendations For Xen versions 4.0 through 4.0.1, update to version 4.0.2 or later. For Xen versions 4.1 through 4.1.0, update to version 4.1.1 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-1898

DSA-2337-1

OPENSUSE-SU-2024:10196-1

RHSA-2011:1189

RHSA-2011:1479

RHSA-2011_1189

RHSA-2011_1479

RHSA-2012:0358

Affected Products

Intel Vt-D

Red Hat

Xen

References · 174

• 🔥 http://invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00070 · Security Note
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-1898 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1898 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-2025.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1898 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1898 · Vendor Advisory
• http://xen.org/download/index_4.0.2.html · Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04342 · Security Note
• https://linux.oracle.com/errata/ELSA-2011-1189.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html · Vendor Advisory