Lucene search
RootSSV:2553HistoryDec 09, 2007 - 12:00 a.m.
Xen mov_to_rr调用RID本地绕过安全限制漏洞
2007-12-0900:00:00
Root
www.seebug.org
14
0.001 Low
EPSS
Percentile
27.0%
BUGTRAQ ID: 26716
CVE(CAN) ID: CVE-2007-6207
Xen是可用于Linux内核的一种虚拟化技术，允许同时运行多个操作系统。
Xen在调用mov_to_rr时没有正确地检查RID（区域标识符），这允许VT-i域中的本地攻击者读取其他VT-i域中的内存。
XenSource Xen 3.1.1
XenSource Xen 3.0.3
XenSource Xen 3.0
XenSource
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
<a href=“http://xen.xensource.com/” target=“_blank”>http://xen.xensource.com/</a>
Related
cve
cve
CVE-2007-6207
2007-12-04 00:46:00
prion
prion
Memory corruption
2007-12-04 00:46:00
cvelist
cvelist
CVE-2007-6207
2007-12-04 00:00:00
nvd
nvd
CVE-2007-6207
2007-12-04 00:46:00
ubuntucve
ubuntucve
CVE-2007-6207
2007-12-04 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:21:39
centos
centos
kernel security update
2008-03-07 00:45:54
nessus
nessus
CentOS 4 / 5 : kernel (CESA-2008:0154)
2010-01-06 00:00:00
Scientific Linux Security Update : kernel on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : kernel (RHSA-2008:0154)
2008-03-07 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2008:0154-01
2009-03-06 00:00:00
RedHat Update for kernel RHSA-2008:0154-01
2009-03-06 00:00:00
Oracle: Security Advisory (ELSA-2008-0154)
2015-10-08 00:00:00
oraclelinux
oraclelinux
Important: kernel security and bug fix update
2008-03-06 00:00:00
redhat
redhat
(RHSA-2008:0154) Important: kernel security and bug fix update
2008-03-05 00:00:00