Veracode Vulnerability DatabaseVERACODE:23426Denial Of Service (DoS)
0.0004 Low
EPSS
Percentile
5.1%
xen is vulnerable to denial of service. The hypervisorβs para-virtualized framebuffer (PVFB) backend failed to validate the frontendβs framebuffer description. This could allow a malicious user to cause a denial of service, or to use a specially crafted frontend to compromise the privileged domain (Dom0).
| CPE | Name | Operator | Version |
|---|---|---|---|
| xen | eq | 3.0.3__25.0.3.el5 | |
| xen | eq | 3.0.3__25.el5 | |
| xen | eq | 3.0.3__25.0.4.el5 | |
| xen | eq | 3.0.3__25.0.3.el5 | |
| xen | eq | 3.0.3__25.el5 | |
| xen | eq | 3.0.3__25.0.4.el5 |
References
secunia.com/advisories/29963
secunia.com/advisories/30781
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2008-0194.html
www.securityfocus.com/bid/29183
www.securitytracker.com/id?1020008
www.vupen.com/english/advisories/2008/1900/references
access.redhat.com/errata/RHSA-2008:0194
bugzilla.redhat.com/show_bug.cgi?id=443078
exchange.xforce.ibmcloud.com/vulnerabilities/42387
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10338
Related
