The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.
CVSS Details
- CVSS 3.1 Base Score: 3.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-headersUpgrade kernel | Dec 1, 2016 | Dec 8, 2010 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 8, 2010 |
| Suse | — | Upgrade kernel-ppc64Upgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-trace-baseUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-trace-develUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-xen-develUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.24-28-lpiacompat | Nov 8, 2024 | Dec 8, 2010 |
| Vmsa 2011 0012 | — | Upgrade VMware ESX 4.0 to build number 480973Upgrade VMware ESX 4.1 to build number 502767 | Oct 20, 2011 | Dec 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub