Off-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls that ignore virtual-address bits.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-xen | Dec 1, 2016 | Oct 1, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Oct 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 1, 2013 |
| Suse | — | Upgrade xen-toolsUpgrade xen-kmp-vmiUpgrade xen-doc-psUpgrade xen-kmp-kdumppaeUpgrade sap-aio-releaseUpgrade xen-kmp-bigsmpUpgrade xen-develUpgrade xen-kmp-vmipaeUpgrade xen-kmp-smpUpgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade xen-tools-ioemuUpgrade xenUpgrade xen-kmp-debugUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xen-kmp-kdump | Feb 17, 2015 | Oct 1, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub