Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-doc | Dec 1, 2016 | Oct 1, 2013 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Oct 1, 2013 |
| Gentoo Linux | — | Upgrade app-emulations/xen-tools.Upgrade app-emulations/xen-pvgrub.Upgrade app-emulations/xen. | Oct 30, 2017 | Oct 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 1, 2013 |
| Suse | — | Upgrade sle-sdk-releaseUpgrade xen-kmp-desktopUpgrade xen-libs-32bitUpgrade xen-doc-psUpgrade xen-doc-htmlUpgrade xenUpgrade xen-kmp-kdumpUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade xen-libsUpgrade xen-tools-ioemuUpgrade xen-kmp-smpUpgrade xen-kmp-debugUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade xen-kmp-bigsmpUpgrade xen-tools-domUUpgrade xen-kmp-vmiUpgrade xen-kmp-kdumppaeUpgrade xen-develUpgrade xen-kmp-vmipaeUpgrade xen-kmp-trace | Dec 12, 2013 | Oct 1, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Oct 1, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub