PT-2019-5081 · Xen+1 · Xen+1
Marek Marczykowski-Górecki
·
Published
2019-12-04
·
Updated
2020-08-04
·
CVE-2019-19579
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Xen versions prior to 4.13
Description
The issue allows attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device. This is due to an incomplete fix for a previous issue. The vulnerability can be exploited when an untrusted domain with access to a physical device can DMA into host memory, leading to privilege escalation. Only systems where guests are given direct access to physical devices capable of DMA (PCI pass-through) are vulnerable. Systems which do not use PCI pass-through are not vulnerable.
Recommendations
For Xen versions prior to 4.13, consider disabling the use of PCI pass-through to minimize the risk of exploitation until a patch is available. Restrict access to physical devices capable of DMA to prevent untrusted domains from accessing them.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Suse
Xen