PT-2018-2684 · Xen+4 · Xen+4

Andy Lutomirski + 1 · Published 2018-07-24 · Updated 2023-02-24 · CVE-2018-14678

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.12 Xen versions prior to 4.11.x

Description An issue in the Linux kernel and Xen hypervisor allows local users to cause a denial of service or possibly gain privileges. The xen failsafe callback entry point does not properly maintain the RBX register, leading to uninitialized memory usage and system crash. Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash. The vulnerability is related to insufficient access control in the xen failsafe callback function.

Recommendations For Linux kernel versions prior to 4.17.12, update to version 4.17.12 or later to resolve the issue. For Xen versions prior to 4.11.x, update to a version later than 4.11.x to resolve the issue. As a temporary workaround, consider restricting access to the xen failsafe callback entry point to minimize the risk of exploitation.

Fix

DoS

Improper Initialization

Weakness Enumeration

CWE-665

CWE-264

Related Identifiers

ALT-PU-2018-2108

ALT-PU-2018-2110

ALT-PU-2018-2181

BDU:2019-01344

CVE-2018-14678

DLA-1529-1

DLA-1531-1

DSA-4308-1

MGASA-2018-0337

MGASA-2018-0340

MGASA-2018-0341

SUSE-SU-2018:3084-1

USN-3931-1

USN-3931-2

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

Xen

References · 155

• https://xenbits.xen.org/xsa/advisory-274.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-7222 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4308-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-8912 · Vendor Advisory
• https://usn.ubuntu.com/3931-2 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0340 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0341 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3931-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14678 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-6974 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-14678 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3459 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19824 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-14678 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0337 · Vendor Advisory