CVE-2007-5907
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
30.6%
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
Affected configurations
References
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html
secunia.com/advisories/28405
secunia.com/advisories/28412
secunia.com/advisories/28636
secunia.com/advisories/32485
www.novell.com/linux/security/advisories/suse_security_summary_report.html
www.redhat.com/support/errata/RHSA-2008-0957.html
www.securityfocus.com/bid/27219
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
30.6%