Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-17346

Опубликовано: 08 окт. 2019
Источник: debian
EPSS Низкий

Описание

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
xenfixed4.11.1+92-g6c33308a8d-1package
xenfixed4.8.5.final+shim4.10.4-1+deb9u12stretchpackage
xennot-affectedjessiepackage

Примечания

  • https://xenbits.xen.org/xsa/advisory-292.html

EPSS

Процентиль: 41%
0.00193
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 6 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

CVSS3: 6.5
redhat
почти 7 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

CVSS3: 8.8
nvd
больше 6 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

CVSS3: 8.8
fstec
больше 6 лет назад

Уязвимость гипервизора Xen, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

EPSS

Процентиль: 41%
0.00193
Низкий