Off-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls that ignore virtual-address bits.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xenUpgrade kernel-PAE-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernelUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-devel | Dec 1, 2016 | Oct 1, 2013 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/xen-pvgrub. | Oct 30, 2017 | Oct 1, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Oct 1, 2013 |
| Suse | — | Upgrade xen-kmp-vmiUpgrade xen-develUpgrade xen-kmp-smpUpgrade xen-kmp-bigsmpUpgrade xen-tools-domuUpgrade sap-aio-releaseUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-vmipaeUpgrade xen-toolsUpgrade xen-doc-psUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade xen-tools-ioemuUpgrade xen-kmp-debugUpgrade xen-kmp-defaultUpgrade xen-kmp-kdumpUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen | Feb 17, 2015 | Oct 1, 2013 |
| Vmsa 2012 0001 | — | Upgrade VMware ESX 4.1 to build number 582267 | Feb 3, 2012 | Feb 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub