Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-PAEUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernelUpgrade kernel-xen-develUpgrade kernel-PAE-develUpgrade kernel-xen | Dec 1, 2016 | Nov 9, 2007 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Nov 9, 2007 |
| Suse | — | Upgrade xen-libsUpgrade suse-releaseUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-tools-ioemuUpgrade xen-doc-psUpgrade xen-doc-pdfUpgrade xen-develUpgrade xen-toolsUpgrade xen | Feb 17, 2015 | Nov 9, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub