The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade xenUpgrade xen-tools-domUUpgrade xen-kmp-bigsmpUpgrade xen-tools-ioemuUpgrade xen-kmp-smpUpgrade xen-toolsUpgrade xen-kmp-debugUpgrade xen-doc-psUpgrade xen-kmp-defaultUpgrade xen-develUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-kmp-kdump | Feb 17, 2015 | Nov 23, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub