PT-2018-2544 · Xen+1 · Xen+1

Published 2018-11-20 · Updated 2024-06-15 · CVE-2018-19966

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.12

Description The issue is related to an interpretation conflict for a union data structure associated with shadow paging, which can be exploited by x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges. This problem arose due to an incorrect fix for a previous issue.

Recommendations For Xen versions prior to 4.12, update to version 4.12 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-436

CWE-264

Related Identifiers

BDU:2019-00953

CVE-2018-19966

DLA-1949-1

DSA-4369-1

OPENSUSE-SU-2018_4111-1

OPENSUSE-SU-2018_4304-1

OPENSUSE-SU-2019_1226-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2018:4070-1

SUSE-SU-2018:4300-1

SUSE-SU-2019:0003-1

SUSE-SU-2019:0020-1

SUSE-SU-2019:0825-1

SUSE-SU-2019:0827-1

SUSE-SU-2019:13921-1

SUSE-SU-2019:14011-1

Affected Products

Suse

Xen

References · 177

• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0020-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-19966 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-19966 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:13921-1 · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-280.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19966 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19966 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19966 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00953 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19966 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19966 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4369-1 · Vendor Advisory
• https://debian.org/security/2019/dsa-4369 · Vendor Advisory