PT-2014-2108 · Xen+1 · Xen+1

Published 2011-05-31 · Updated 2015-10-06 · CVE-2011-1166

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.0.2

Description The issue allows local 64-bit PV guests to cause a denial of service, resulting in a host crash. This occurs when a guest specifies user mode execution without user-mode pagetables.

Recommendations For versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1166

DSA-2337-1

RHSA-2011:0833

RHSA-2011_0833

Affected Products

Red Hat

Xen

References · 23

• https://nvd.nist.gov/vuln/detail/CVE-2011-1166 · Security Note
• http://rhn.redhat.com/errata/RHSA-2011-0833.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04607 · Security Note
• https://osv.dev/vulnerability/CVE-2011-1166 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1166 · Vendor Advisory
• http://wiki.xen.org/wiki/Security_Announcements#XSA-1_Host_crash_due_to_failure_to_correctly_validate_PV_kernel_execution_state. · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1166 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2011-1495 · Note
• https://access.redhat.com/security/cve/CVE-2011-1079 · Note
• https://access.redhat.com/security/cve/CVE-2011-1080 · Note
• https://access.redhat.com/security/cve/CVE-2011-1494 · Note
• http://downloads.avaya.com/css/P8/documents/100145416 · Note
• https://access.redhat.com/security/cve/CVE-2011-1172 · Note
• https://access.redhat.com/security/cve/CVE-2011-1166 · Note
• https://access.redhat.com/security/cve/CVE-2011-1170 · Note