Lucene search

K
nvd[email protected]NVD:CVE-2010-4247
HistoryJan 11, 2011 - 3:00 a.m.

CVE-2010-4247

2011-01-1103:00:04
CWE-20
web.nvd.nist.gov
7

CVSS2

5.5

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

28.1%

The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
citrixxenRange3.3.2
OR
citrixxenMatch3.0.2
OR
citrixxenMatch3.0.3
OR
citrixxenMatch3.0.4
OR
citrixxenMatch3.1.3
OR
citrixxenMatch3.1.4
OR
citrixxenMatch3.2.0
OR
citrixxenMatch3.2.1
OR
citrixxenMatch3.2.2
OR
citrixxenMatch3.2.3
OR
citrixxenMatch3.3.0
OR
citrixxenMatch3.3.1
AND
linuxlinux_kernelMatch2.6.18
VendorProductVersionCPE
citrixxen*cpe:2.3:a:citrix:xen:*:*:*:*:*:*:*:*
citrixxen3.0.2cpe:2.3:a:citrix:xen:3.0.2:*:*:*:*:*:*:*
citrixxen3.0.3cpe:2.3:a:citrix:xen:3.0.3:*:*:*:*:*:*:*
citrixxen3.0.4cpe:2.3:a:citrix:xen:3.0.4:*:*:*:*:*:*:*
citrixxen3.1.3cpe:2.3:a:citrix:xen:3.1.3:*:*:*:*:*:*:*
citrixxen3.1.4cpe:2.3:a:citrix:xen:3.1.4:*:*:*:*:*:*:*
citrixxen3.2.0cpe:2.3:a:citrix:xen:3.2.0:*:*:*:*:*:*:*
citrixxen3.2.1cpe:2.3:a:citrix:xen:3.2.1:*:*:*:*:*:*:*
citrixxen3.2.2cpe:2.3:a:citrix:xen:3.2.2:*:*:*:*:*:*:*
citrixxen3.2.3cpe:2.3:a:citrix:xen:3.2.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

5.5

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

28.1%