An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Jun 13, 2018 | May 10, 2018 |
| Debian | — | Upgrade xen | May 17, 2018 | May 10, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 31, 2018 | May 10, 2018 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xenUpgrade xen-tools-domUUpgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-kmp-pae | May 31, 2018 | May 10, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub