The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade xen-kmp-smpUpgrade xen-tools-ioemuUpgrade xen-tools-domUUpgrade xen-kmp-debugUpgrade xen-kmp-bigsmpUpgrade xen-toolsUpgrade xenUpgrade xen-doc-psUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade xen-kmp-kdumpUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-develUpgrade xen-libs | Feb 17, 2015 | Nov 23, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub