The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall.
CVSS Details
- CVSS 3.1 Base Score: 2.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Jan 11, 2013 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-libs-debuginfo-x86Upgrade xen-tools-domUUpgrade xen-tools-debuginfoUpgrade xen-kmp-pae-debuginfoUpgrade xen-tools-domU-debuginfoUpgrade xenUpgrade xen-libs-debuginfo-32bitUpgrade xen-kmp-traceUpgrade xen-kmp-desktopUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-develUpgrade xen-debugsourceUpgrade xen-kmp-desktop-debuginfoUpgrade xen-libs-debuginfoUpgrade xen-doc-pdfUpgrade xen-libs-x86Upgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-kmp-defaultUpgrade xen-kmp-default-debuginfo | Dec 12, 2013 | Jan 11, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub