Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-devel | Dec 1, 2016 | Jan 7, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 7, 2014 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xen-kmp-bigsmpUpgrade xen-libsUpgrade xen-kmp-kdumpUpgrade xen-tools-ioemuUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-kmp-vmipaeUpgrade xen-kmp-vmiUpgrade xen-toolsUpgrade xenUpgrade xen-doc-psUpgrade xen-kmp-smpUpgrade xen-develUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-debugUpgrade sap-aio-release | Feb 17, 2015 | Jan 7, 2014 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub