Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-19966

Опубликовано: 20 нояб. 2018
Источник: redhat
CVSS3: 5.1

Описание

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=1652235xen: Conflicts with shadow paging due to XSA-240 incomplete fix (XSA-280)

5.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.

CVSS3: 8.8
nvd
около 7 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.

CVSS3: 8.8
debian
около 7 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS ...

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.

CVSS3: 8.8
fstec
около 7 лет назад

Уязвимость интерпретации структуры данных union гипервизора Xen, связанная с теневой подкачкой данных, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии в системе

5.1 Medium

CVSS3