Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAEUpgrade kernel-docUpgrade kernel-develUpgrade kernel-xenUpgrade kernel-headersUpgrade kernel-PAE-develUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-devel | Dec 1, 2016 | Jan 7, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 7, 2014 |
| Suse | — | Upgrade xenUpgrade xen-toolsUpgrade xen-kmp-smpUpgrade xen-kmp-kdumppaeUpgrade xen-develUpgrade xen-doc-psUpgrade xen-kmp-vmipaeUpgrade xen-kmp-debugUpgrade sap-aio-releaseUpgrade xen-kmp-vmiUpgrade xen-tools-ioemuUpgrade xen-kmp-kdumpUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade xen-libsUpgrade xen-tools-domUUpgrade xen-kmp-bigsmpUpgrade xen-doc-pdfUpgrade xen-libs-32bit | Feb 17, 2015 | Jan 7, 2014 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub