The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 5.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-headersUpgrade kernelUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xen-devel | Dec 1, 2016 | Jan 10, 2011 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 11, 2011 |
| Ubuntu | — | Upgrade linux-image-2.6.24-29-sparc64Upgrade linux-image-2.6.24-29-hppa64Upgrade linux-image-2.6.24-29-powerpcUpgrade linux-image-2.6.24-29-sparc64-smpUpgrade linux-image-2.6.24-29-serverUpgrade linux-image-2.6.24-29-xenUpgrade linux-image-2.6.24-29-mckinleyUpgrade linux-image-2.6.24-29-hppa32Upgrade linux-image-2.6.24-29-lpiacompatUpgrade linux-image-2.6.24-29-386Upgrade linux-image-2.6.24-29-itaniumUpgrade linux-image-2.6.24-29-genericUpgrade linux-image-2.6.24-29-powerpc64-smpUpgrade linux-image-2.6.24-29-rtUpgrade linux-image-2.6.24-29-openvzUpgrade linux-image-2.6.24-29-powerpc-smpUpgrade linux-image-2.6.24-29-lpiaUpgrade linux-image-2.6.24-29-virtual | Nov 8, 2024 | Jan 11, 2011 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.1 to build number 502767Upgrade VMware ESX 4.0 to build number 480973 | Oct 20, 2011 | Jan 10, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub