The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Dec 13, 2012 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-xen | Dec 1, 2016 | Dec 13, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Dec 13, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Dec 13, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 13, 2012 |
| Suse | — | Upgrade xen-toolsUpgrade xen-tools-domuUpgrade xen-libs-debuginfo-x86Upgrade xen-kmp-smpUpgrade xen-doc-psUpgrade xen-tools-domU-debuginfoUpgrade xen-kmp-vmiUpgrade xen-kmp-traceUpgrade xen-develUpgrade xen-libs-x86Upgrade xen-kmp-vmipaeUpgrade xen-libs-debuginfo-32bitUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-desktopUpgrade xen-tools-ioemuUpgrade xen-kmp-defaultUpgrade xen-kmp-kdumpUpgrade xenUpgrade xen-libsUpgrade xen-tools-debuginfoUpgrade xen-kmp-pae-debuginfoUpgrade sle-sdk-releaseUpgrade xen-kmp-debugUpgrade xen-kmp-default-debuginfoUpgrade xen-libs-debuginfoUpgrade xen-kmp-desktop-debuginfoUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade xen-debugsourceUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade xen-kmp-bigsmp | Feb 17, 2015 | Dec 13, 2012 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Dec 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub