PT-2013-1400 · Xen+1 · Xen+1

Published 2011-09-06 · Updated 2023-02-13 · CVE-2011-2901

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 3.3 and earlier

Description The issue is related to an off-by-one error in the addr ok macro, which can be exploited by local 64-bit PV guest administrators to cause a denial of service, resulting in a host crash. This can be achieved through unspecified hypercalls that ignore virtual-address bits.

Recommendations For Xen versions 3.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-2901

RHSA-2011:1212

RHSA-2011:1813

RHSA-2011_1212

Affected Products

Red Hat

Xen

References · 19

• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2011-1212.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04343 · Security Note
• https://bdu.fstec.ru/vul/2015-04341 · Security Note
• https://bdu.fstec.ru/vul/2015-04342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-2901 · Security Note
• https://github.com/torvalds/linux/commit/1d1221f375c94ef961ba8574ac4f85c8870ddd51 · Note
• https://access.redhat.com/errata/RHSA-2011:1212 · Note
• http://secunia.com/advisories/55082 · Note
• https://access.redhat.com/security/cve/CVE-2011-2495 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=714867 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=728042 · Note
• https://access.redhat.com/security/cve/CVE-2011-2491 · Note
• https://access.redhat.com/security/cve/CVE-2011-2482 · Note