Lucene search
Ubuntu.comUB:CVE-2008-1952HistoryJun 23, 2008 - 12:00 a.m.
CVE-2008-1952
2008-06-2300:00:00
ubuntu.com
ubuntu.com
9
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
26.7%
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen
ioemu does not properly restrict the frame buffer size, which allows
attackers to cause a denial of service (crash) by mapping an arbitrary
amount of guest memory.
Notes
| Author | Note |
|---|---|
| mdeslaur | this completes CVE-2008-1943 first half is xen-pvfb-validate-fb.patch in RHEL5 rhel5 is missing the second half |
Related
ubuntucve
ubuntucve
CVE-2008-1943
2008-05-14 00:00:00
nessus
nessus
OracleVM 2.1 : xen (OVMSA-2008-2007)
2014-11-26 00:00:00
Oracle Linux 5 : xen (ELSA-2008-0892)
2013-07-12 00:00:00
Scientific Linux Security Update : xen on SL5.x i386/x86_64
2012-08-01 00:00:00
debian
debian
[Backports-security-announce] Security Update for xen-3
2008-12-15 12:39:05
[Backports-security-announce] Security Update for xen-3
2008-12-15 12:38:44
prion
prion
Buffer overflow
2008-05-14 18:20:00
Design/Logic Flaw
2008-06-23 19:41:00
cve
cve
CVE-2008-1943
2008-05-14 18:20:00
CVE-2008-1952
2008-06-23 19:41:00
nvd
nvd
CVE-2008-1952
2008-06-23 19:41:00
CVE-2008-1943
2008-05-14 18:20:00
cvelist
cvelist
CVE-2008-1952
2008-06-23 19:00:00
CVE-2008-1943
2008-05-14 18:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:27:30
Denial Of Service (DoS)
2020-04-10 00:26:30
seebug
seebug
XenθΆ
θζεεΈ§ηΌε²εΊεη«―εΈ§ηΌε²εΊε€ηζΌζ΄
2008-06-25 00:00:00
centos
centos
xen security update
2008-10-05 17:02:53
xen security update
2008-05-16 01:20:08
openvas
openvas
Oracle: Security Advisory (ELSA-2008-0892)
2015-10-08 00:00:00
RedHat Update for xen RHSA-2008:0892-01
2009-03-06 00:00:00
RedHat Update for xen RHSA-2008:0892-01
2009-03-06 00:00:00
redhat
redhat
(RHSA-2008:0892) Important: xen security and bug fix update
2008-10-01 00:00:00
(RHSA-2008:0194) Important: xen security and bug fix update
2008-05-13 00:00:00
oraclelinux
oraclelinux
xen security and bug fix update
2008-10-01 00:00:00
xen security and bug fix update
2008-05-13 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
26.7%
Related for UB:CVE-2008-1952