CVE-2018-10471

Опубликовано: 27 апр. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.9

EPSS Низкий

Описание

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.

Ссылки

http://www.securityfocus.com/bid/104003
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://security.gentoo.org/glsa/201810-06
https://www.debian.org/security/2018/dsa-4201
Third Party Advisory
https://xenbits.xen.org/xsa/advisory-259.html
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/104003
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://security.gentoo.org/glsa/201810-06
https://www.debian.org/security/2018/dsa-4201
Third Party Advisory
https://xenbits.xen.org/xsa/advisory-259.html
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

Версия до 4.10.1 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00059

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-10471

CVSS3: 6.5

ubuntu

почти 8 лет назад

CVE-2018-10471

CVSS3: 5.6

redhat

почти 8 лет назад

CVE-2018-10471

CVSS3: 6.5

debian

почти 8 лет назад

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS ...

GHSA-v5vc-f4vf-8rvg

CVSS3: 6.5

github

больше 3 лет назад

SUSE-SU-2018:1216-1

suse-cvrf

больше 7 лет назад

Security update for xen

EPSS

Процентиль: 18%

0.00059

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-787