Off-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls that ignore virtual-address bits.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernelUpgrade kernel-debug-devel | Dec 1, 2016 | Oct 1, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Oct 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 1, 2013 |
| Suse | — | Upgrade xen-doc-pdfUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xen-tools-ioemuUpgrade xen-kmp-debugUpgrade xen-kmp-kdumpUpgrade xen-toolsUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-smpUpgrade sap-aio-releaseUpgrade xen-develUpgrade xen-doc-psUpgrade xen-kmp-vmiUpgrade xen-kmp-vmipaeUpgrade xen-kmp-bigsmp | Feb 17, 2015 | Oct 1, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub