Rapid7 Vulnerability & Exploit Database

ELSA-2011-1479 Important: Oracle Linux kernel security, bug fix, and enhancement update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2011-1479 Important: Oracle Linux kernel security, bug fix, and enhancement update

Severity

CVSS

(AV:A/AC:M/Au:S/C:C/I:C/A:C)

Published

08/12/2011

Created

07/25/2018

Added

12/20/2011

Modified

04/11/2019

Description

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."

Solution(s)

oracle-linux-upgrade-kernel
oracle-linux-upgrade-kernel-debug
oracle-linux-upgrade-kernel-debug-devel
oracle-linux-upgrade-kernel-devel
oracle-linux-upgrade-kernel-doc
oracle-linux-upgrade-kernel-headers
oracle-linux-upgrade-kernel-pae
oracle-linux-upgrade-kernel-pae-devel
oracle-linux-upgrade-kernel-xen
oracle-linux-upgrade-kernel-xen-devel
oracle-linux-upgrade-ocfs2
oracle-linux-upgrade-oracleasm

References

https://attackerkb.com/topics/cve-2011-1162
48236
50764
CVE - 2011-1162
CVE - 2011-1898
CVE - 2011-2203
CVE - 2011-2494
CVE - 2011-3363
Category I
V0033794
V0033884
2012-A-0148
2012-A-0153
http://oss.oracle.com/pipermail/el-errata/2011-November/002487.html

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;