Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel | Dec 1, 2016 | Nov 21, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Nov 21, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Nov 21, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 21, 2012 |
| Suse | — | Upgrade libvirt-pythonUpgrade libvirt-client-32bitUpgrade xen-doc-pdfUpgrade xen-develUpgrade xenUpgrade xen-libsUpgrade libvirt-clientUpgrade xen-doc-htmlUpgrade libvirt-docUpgrade libvirtUpgrade vm-installUpgrade xen-tools-domUUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade libvirt-devel-32bitUpgrade xen-toolsUpgrade libvirt-develUpgrade xen-kmp-defaultUpgrade xen-kmp-trace | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Nov 21, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub