PT-2018-2671 · Amd+1 · Xen+1

Paul Durrant · Published 2018-12-07 · Updated 2019-10-08 · CVE-2018-19962

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.12

Description An issue in Xen on AMD x86 platforms allows guest OS users to potentially gain host OS privileges due to the unsafe combination of small IOMMU mappings into larger ones. This could enable an attacker to elevate their privileges.

Recommendations For Xen versions prior to 4.12, update to a version that includes the fix for this issue to prevent potential privilege escalation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-264

Related Identifiers

BDU:2019-01306

CVE-2018-19962

DLA-1949-1

DSA-4369-1

OPENSUSE-SU-2018_4111-1

OPENSUSE-SU-2018_4304-1

OPENSUSE-SU-2019_1226-1

SUSE-SU-2018:4070-1

SUSE-SU-2018:4300-1

SUSE-SU-2019:0003-1

SUSE-SU-2019:0020-1

SUSE-SU-2019:0825-1

SUSE-SU-2019:0827-1

SUSE-SU-2019:13921-1

SUSE-SU-2019:14011-1

Affected Products

Suse

Xen

References · 95

• https://osv.dev/vulnerability/DSA-4369-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19962 · Security Note
• https://debian.org/security/2019/dsa-4369 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0003-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0020-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-19962 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01306 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19962 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19962 · Vendor Advisory
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:14011-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:0825-1 · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-275.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:13921-1 · Vendor Advisory