Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging an incorrect choice for software interrupt delivery.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-xen | Sep 20, 2017 | Feb 22, 2017 | |
| Debian | debian-upgrade-xen | Jul 30, 2024 | Feb 22, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-emulation-xengentoo-linux-upgrade-app-emulation-xen-pvgrubgentoo-linux-upgrade-app-emulation-xen-tools | Oct 30, 2017 | Feb 22, 2017 | |
| Suse | — | suse-upgrade-xensuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-domususe-upgrade-xen-tools-xendomains-wait-disk | Dec 9, 2016 | Dec 9, 2016 |
| Ubuntu | ubuntu-upgrade-xen | Nov 19, 2024 | Feb 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub